Another IE 7 pop-up security flaw discovered

[WN-Ali]

Security researchers on Monday warned of a vulnerability in Internet Explorer 7 that could allow malicious attackers to alter content in a legitimate Web site's pop-up window.

The browser flaw could affect users visiting a trusted site by opening a pop-up window containing the altered content of a malicious Web site. This is the second IE 7 flaw that has been discovered since Microsoft released the browser two weeks ago. Last week, a security flaw was discovered in IE 7 that could spoof the address of a pop-up window.

The two IE 7 flaws, if used in conjunction with each other, can easily dupe all but the most security-minded users, said Thomas Kristensen, chief technology officer of security company Secunia, which discovered the flaws.

Read full article here.