General Information

Frame Spoofing

Variants:
Direct 

Vector Type:
Attack

Relevance:
Technology Version Specific

Layer:
Web-Infrastructure-Level

Platforms:
Outdated IE, Outdated Firefox, Netscape

Target Type:
Web Application

Affected Mechanisms:
Hardening

Invented In:
23/12/1998

Added In:
16/12/2014


Vector Operation Method:
Abuse a permissive cross-origin frame policy of certain browsers to perform phishing attacks.


Direct Variant:

Frame Spoofing

Variant Title:
Frame Spoofing

Typical Severity:
Minor

Resources:

White Papers:

Learn More: