Web Bowsers At Risk To New Spoofing Scheme

A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate.

“Danish security company Secunia posted an alert describing the vulnerability — which affects Mozilla, Firefox, Safari, Opera, and Konqueror — as a “moderately critical” problem.

The vulnerability impacts every browser built atop the open-source Geko browser kernel — nearly all except IE — because of a flaw in handling International Domain Names (IDN). Hackers can register domain names with certain international characters that resemble other commonly-used characters, said Secunia, to spoof the address and trick the user into thinking they’re at a legitimate site and/or it’s secured by SSL. “

Believe it or not, Internet Explorer seems to be the only browser not at risk. Good job Microsoft!

Read more at Information Week