Jump to content

Frame injection

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Tohd8BohaithuGh1 (talk | contribs) at 13:15, 20 August 2008 (objection: added new reference, add more content). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A frame injection attack is an attack on Internet Explorer 5, Internet Explorer 6 and Internet Explorer 7 to load arbitrary code in the browser.[1] This attack is caused Internet Explorer not checking the destination of the resulting frame[2], therefore allowing arbitrary code such as Javascript or VBScript. This also happens when code gets injected through frames due to scripts not validating their input.[3] This other type of frame injection affects all browsers and scripts that do not validate untrusted input.[4]


References

  1. ^ http://secunia.com/advisories/11966/
  2. ^ http://www.microsoft.com/technet/security/bulletin/ms98-020.mspx
  3. ^ http://www.owasp.org/index.php/Cross_Frame_Scripting
  4. ^ http://secunia.com/cve_reference/CVE-2004-0719/
Retrieved from "https://en.wikipedia.org/w/index.php?title=Frame_injection&oldid=233107238"