RE: Internet Explorer URL parsing vulnerability

["Mimmus" <dviggiani@tiscali.it>]

Can any workaround be used at proxy level? 

I.e. can malicious URLs be blocked using Squid?



Thanks in advance

Domenico Viggiani



> -----Original Message-----

> From: bugtraq@zapthedingbat.com [mailto:bugtraq@zapthedingbat.com]

> Sent: Tuesday, December 09, 2003 3:44 PM

> Subject: Internet Explorer URL parsing vulnerability

> 

> Internet Explorer URL parsing vulnerability

> Vendor Notified 09 December, 2003

> 

> # Vulnerability ##########

> There is a flaw in the way that Internet Explorer displays 

> URLs in the address bar.

> 

> By opening a specially crafted URL an attacker can open a 

> page that appears to be from a different domain from the 

> current location.