This host is installed with Microsoft Internet Explorer and is prone to URI spoofing vulnerability. The flaw is exists due to failure to adequately handle specific combination of the non-breaking space character like '&NBSP '.

Attacker may leverage this issue to spoof the source URI of a site which leads to false sense of trust. Impact Level: System

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. For updates refer to http://windows.microsoft.com/en-us/internet-explorer/download-ie

Microsoft Internet Explorer versions 6.0 SP1 and prior

• http://web.nvd.nist.gov/view/vuln/detail?execution

---

Updated on 2015-03-25