Javascript Vulnerability Affects Many Popular Browsers

Posted by Devin Categories: Internet, Software

Security company Secunia is warning that many major Internet browsers contain a vulnerability that could allow cybercriminals to steal personal information.  The problem has to do with the fact that JavaScript boxes do not show where they originate, so users could be tricked into putting their information into a form they believe is from a trusted site.  The browsers that are reportedly affected are latest versions of IE, IE for Mac, Safari, iCab, Mozilla, Mozilla Firefox and Camino. Opera 7 and 8 are affected, but not 8.01, according to Opera.  Even though Secunia has labeled the problem as “Less Critical”, most companies are already trying repair the problem.

To take advantage of the flaw, a cybercriminal would have to direct a Web user from a malicious site to a genuine, trusted site such as an online bank, in a new browser window. The malicious site would then open a JavaScript dialog box in front of the trusted Web site, and a user might then be fooled into sending personal information back to the malicious site.

Read More | ZDNet