A week after a nasty IDN flaw was found in all non IE browsers (because IE doesn’t natively support International Domain Names), it turns out that Microsoft didn’t get away scott free as a new Phishing flaw has been found in IE and confirmed by Microsoft. The flaw has to do with long URL’s in pop-up windows, and you can read more about it at Secunia. There is no patch for this flaw yet and all versions of IE6 (including SP2) are affected. The only suggestion is not to enter sensitive information into pop-up windows after following links in un-trusted sites. Eweek have also covered this issue and you can read it here.
