RE: Internet Explorer URL parsing vulnerability

["Mimmus" <dviggiani () tiscali it>]

Can any workaround be used at proxy level? 

I.e. can malicious URLs be blocked using Squid?



Thanks in advance

Domenico Viggiani



> -----Original Message-----

> From: bugtraq () zapthedingbat com [mailto:bugtraq () zapthedingbat com]

> Sent: Tuesday, December 09, 2003 3:44 PM

> Subject: Internet Explorer URL parsing vulnerability

>

> Internet Explorer URL parsing vulnerability

> Vendor Notified 09 December, 2003

>

> # Vulnerability ##########

> There is a flaw in the way that Internet Explorer displays 

> URLs in the address bar.

>

> By opening a specially crafted URL an attacker can open a 

> page that appears to be from a different domain from the 

> current location.