|
Multiple Mail Transfer Agent Embedded Hyperlink URI Obfuscation Variant Weakness
It has been reported that multiple Mail Transfer Agents are prone to a URI obfuscation weakness variant that may hide the true contents of a link. The problem occurs when a URI is formatted in such a way that a "*" character is located after the initial URI and a secondary URI is appended to this string. It is said that, when performing a mouseover of such a URI, it will cause the status bar to only display the contents of the first URI value, not the entire link. This could be used to trick a user into following a malicious link. |
|
|
Privacy Statement |
