phish

Adobe is suggesting that users configure its PDF Reader product to limit the damage from an attack.

I talked about this before in a previous post. Mozilla pointed me on a flaw, and I went back to investigate it some more. I turns out that I'm right after all but in a different setting, but with the same idea. The below vector can be used to trick filters or surfers into performing various things. One of them is to steal cookies from surfers who think that the URI we give them is legit, or phish for credentials by setting up a cloned GMail page. This is due to the empty user name: http://:uri@phishdomain. Normally when you fill in the user name like: http://foo:uri@phishdomain.  read more »