Another Internet Explorer flaw found

Dom · Jul 7, 2004, 08:19 PM

A computer science researcher has highlighted the shortcomings of Microsoft's latest patch for its Internet Explorer browser by identifying another way that online vandals could run malicious programs on a Web surfer's computer.

Microsoft on Friday released a fix that's designed to protect computers from one of three flaws that, together, could be used to digitally slip past a PC's security through the browser. This weekend, however, a security researcher identified another flaw that could serve the same purpose and that isn't fixed by Microsoft's patch.

"They chose to address only one part of the problem," said Jelmer Kuperus, a computer science student in the Netherlands who posted the code for the work-around. "They should have seen this one coming."

This marks the third time in a month that Microsoft has had to play catch-up to researchers' public disclosures about insecurities in Internet Explorer. In early June, Kuperus found a Web site that used two previously unknown vulnerabilities, plus the recently patched one, to install adware on victims' computers. Additionally, security researchers discovered last week that a milder vulnerability, which Microsoft had fixed in early versions of the browser, reappeared in later versions.

Read More...

___________________
Source: ZDnet

Chaos · Jul 7, 2004, 08:30 PM

lame ass bandaid solutions

PangingJr · Jul 7, 2004, 08:55 PM

http://www.mozilla.org/products/firefox/why/

---------------------------------------------------

Dom · Jul 7, 2004, 09:02 PM

Two things keep me away from FireFox:
1.No drag and drop/copy and paste FTP file uploading
2.Autoscroll is flawed

PoopyTheJ · Jul 7, 2004, 09:04 PM

Hmmm, I think IE has more holes than solid code. Like a pice of swiss cheese, except no cheese just holes.

JLP · Jul 8, 2004, 12:12 AM

Yup this IE is a total crap of the crap.

Jul 7, 2004, 08:19 PM	#1
Dom DriverHeaven Extreme Member Join Date: Jun 2002 Posts: 12,940 Rep Power: 0	Another Internet Explorer flaw found A computer science researcher has highlighted the shortcomings of Microsoft's latest patch for its Internet Explorer browser by identifying another way that online vandals could run malicious programs on a Web surfer's computer. Microsoft on Friday released a fix that's designed to protect computers from one of three flaws that, together, could be used to digitally slip past a PC's security through the browser. This weekend, however, a security researcher identified another flaw that could serve the same purpose and that isn't fixed by Microsoft's patch. "They chose to address only one part of the problem," said Jelmer Kuperus, a computer science student in the Netherlands who posted the code for the work-around. "They should have seen this one coming." This marks the third time in a month that Microsoft has had to play catch-up to researchers' public disclosures about insecurities in Internet Explorer. In early June, Kuperus found a Web site that used two previously unknown vulnerabilities, plus the recently patched one, to install adware on victims' computers. Additionally, security researchers discovered last week that a milder vulnerability, which Microsoft had fixed in early versions of the browser, reappeared in later versions. Read More... ___________________ Source: ZDnet

Jul 7, 2004, 08:30 PM	#2
Chaos Number Nine Join Date: May 2002 Location: Nova Scotia Posts: 5,268 Rep Power: 167 System Specs	lame ass bandaid solutions __________________

Jul 7, 2004, 09:04 PM	#5
PoopyTheJ DriverHeaven Extreme Member Join Date: Jan 2003 Location: Ohio Posts: 1,588 Rep Power: 66	Hmmm, I think IE has more holes than solid code. Like a pice of swiss cheese, except no cheese just holes. __________________ [COLOR=Blue]“Alright boys, let’s start her up and see why she doesn’t work.” - John Fritz "I aim to misbehave" Malcolm Reynolds ATI Catalyst Beta Tester[/COLOR]

Jul 7, 2004, 08:55 PM	#3
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	http://www.mozilla.org/products/firefox/why/ ---------------------------------------------------

Jul 7, 2004, 09:02 PM	Thread Starter #4
Dom DriverHeaven Extreme Member Join Date: Jun 2002 Posts: 12,940 Rep Power: 0	Two things keep me away from FireFox: 1.No drag and drop/copy and paste FTP file uploading 2.Autoscroll is flawed

Jul 8, 2004, 12:12 AM	#6
JLP DriverHeaven Lover Join Date: Aug 2002 Location: Slovenia Posts: 249 Rep Power: 0	Yup this IE is a total crap of the crap.