• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer Embedded Content Status Bar URI Obfuscation Weakness

A demonstration exploit is available at the following location:
http://www.persiax.com/pocs/statusbar/status.htm

A further example exploit is available from "http-equiv@excite.com" <1@malware.com>:
http://www.malware.com/xcellent.html