Leaked Windows Code Opens IE Hole

Dyre Straits · Feb 18, 2004, 07:45 AM

A bug hunter claims to have uncovered a security flaw in Microsoft's Internet Explorer 5 Web browser by studying Windows source code that was leaked last week.

The vulnerability allows an attacker gain control over a user's computer by using a specially crafted bitmap file. When loaded using IE 5, the file will trigger an overflow error and allow the attacker to run arbitrary code on a victim's machine, according to a description of the flaw posted Sunday on the SecurityTracker.com Web site.

The flaw was uncovered by reviewing IE source code that was part of a larger Windows code leak last week and exists in all versions of IE 5 for all Windows versions, according to the description.

Joris Evers, IDG News Service

Article Here

Source: PC World

TwistedMetal · Feb 18, 2004, 09:12 AM

Well, if I had Windows 95 then I might worry.

Since I have Windows XP Pro and Firefox. Bring on the IE flaws!

The_Neon_Cowboy · Feb 18, 2004, 12:24 PM

and does he know that leak is illeagal to have so he's just confessed to a fellony? even just haveing the code

Zardon · Feb 18, 2004, 02:33 PM

some more information on this here

Zardon · Feb 18, 2004, 02:34 PM

and some denials from microsoft here

Feb 18, 2004, 07:45 AM	#1
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,201 Rep Power: 216 System Specs	Leaked Windows Code Opens IE Hole A bug hunter claims to have uncovered a security flaw in Microsoft's Internet Explorer 5 Web browser by studying Windows source code that was leaked last week. The vulnerability allows an attacker gain control over a user's computer by using a specially crafted bitmap file. When loaded using IE 5, the file will trigger an overflow error and allow the attacker to run arbitrary code on a victim's machine, according to a description of the flaw posted Sunday on the SecurityTracker.com Web site. The flaw was uncovered by reviewing IE source code that was part of a larger Windows code leak last week and exists in all versions of IE 5 for all Windows versions, according to the description. Joris Evers, IDG News Service Article Here Source: PC World

Feb 18, 2004, 09:12 AM	#2
TwistedMetal MC John-117 Join Date: Jul 2003 Location: Phoenix, Arizona Posts: 728 Rep Power: 0	Well, if I had Windows 95 then I might worry. Since I have Windows XP Pro and Firefox. Bring on the IE flaws! __________________ [color=red][/color]

Feb 18, 2004, 12:24 PM	#3
The_Neon_Cowboy HardwareHeaven Extreme Member Join Date: Dec 2002 Location: U.S.A. Posts: 16,009 Rep Power: 92 System Specs	and does he know that leak is illeagal to have so he's just confessed to a fellony? even just haveing the code __________________

Feb 18, 2004, 02:33 PM	#4
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 179	some more information on this here

Feb 18, 2004, 02:34 PM	#5
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 179	and some denials from microsoft here