Browser Security News

Microsoft’s Internet Explorer 7 can be spoofed by identity thieves, a security company warned Wednesday, marking the second bug in the new browser since it debuted a week ago.

Danish vulnerability tracker Secunia alerted users that a spoofing attack - where a bogus site seems to have a legitimate URL - can be conducted against IE 7. The company has posted a test it says demonstrates the vulnerability.

"This is the kind of spoofing vulnerabilities which IE7 was supposed to be better at protecting against than its predecessor," said Thomas Kristensen, Secunia’s chief technology officer. "While the issue isn’t clear cut since the vigilant user might be able to spot that something isn’t quite right, [others may be] easily fooled by this trick, despite the built-in anti-phishing mechanism being enabled [in IE 7]," he added. IE 7 suffers from second bug - Security - www.itnews.com.au