Hai Nam Luke has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct phishing attacks.
The vulnerability is caused due to a race condition in the loading of web content and Macromedia Flash Format files (“.swf”) in browser windows. This can be exploited to spoof the address bar in a browser window showing web content from a malicious web site.
Secunia has constructed a test, which can be used to check if your browser is affected by this issue.
The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP1/SP2. The vulnerability has also been confirmed in Internet Explorer 7 Beta 2 Preview (March edition). Other versions may also be affected.
For protect your PC Disable Active Scripting support.
Thanks to Secunia
