Drive-by Pharming anyone ?

I find this relatively recent paper (PDF) about a new attack on the home routers interesting. Not only because of the attack itself, but because many other HTTP-based attack is possible from an internal network - imagine a corporate user behind the company firewall loading a Javascript that scans the internal network for a possible victim of HTTP-based attack...