| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Another IE 7 pop-up problem discovered | |
|
||
| Time: 01:05 EST/06:05 GMT | News Source: ZDNet | Posted By: Kenneth van Surksum | ||
|
Security researchers on Monday warned of a problem in Internet Explorer 7 that could allow malicious attackers to alter content in a legitimate Web site's pop-up window. The browser issue could affect users who visit a trusted site by opening a pop-up window in that site that contains malicious code. This is the second IE 7 problem that has been discovered since Microsoft released the browser two weeks ago. Last week, a security flaw was discovered in IE 7 that could spoof the address of a pop-up window. The two IE 7 security holes, if used in conjunction with each other, can easily dupe all but the most security-minded users, said Thomas Kristensen, chief technology officer of security company Secunia, which discovered the problems. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 324 Last | Next |
The time now is
2:00:54 PM
ET.
Any comment problems? E-mail us |
| #1 By 2459 (69.22.124.202) at 10/31/2006 2:01:34 AM |
| The flaw is in the user assigning the site to the trusted sites domain. If you do that you are by definition decreasing your security because you "trust" the site. Is the next flaw going to be spoofing of the status bar in the trusted sites zone since scripts are allowed to access it? |
| #2 By 23275 (68.17.42.38) at 10/31/2006 4:17:31 AM |
|
Ok, while holding your left foot out and running as a local machine admin, add the unknown site to your trusted sites list - making sure to clear the checkbox requiring third party certifiacte validation. Now, keep the left foot out and now raise and wiggle your right foot....
[whadda ya mean you'll hit the floor...? and quit complaining that you do not know about the address and don't want to add it to your trusted sites list here... remember, we have to prove IE 7 to be flawed and you're going to play along....] |
| #3 By 2459 (69.22.124.202) at 10/31/2006 6:39:05 AM |
|
Firefox is also affected, but again, the issue is whitelisting the site.
http://www.betanews.com/article/Vulnerability_Affects_Firefox_and_IE_New_and_Old/1162235840 This post was edited by n4cer on Tuesday, October 31, 2006 at 06:41. |
| #4 By 3746 (71.19.41.232) at 10/31/2006 8:38:28 AM |
| wow - they are really digging deep to come up with "flaws" in IE7. |
| #5 By 1474 (160.125.253.10) at 10/31/2006 11:22:27 AM |
| Let me see if I got this right, for the last 4 to 5 months while IE7 was in beta, then RC1, they (security smart asses) found nothing; no problems; no issues. The day IE7 and/or FireFox 2.0 (beta and RC1 and 2) release there are security issues? What the @#$$%#@@ were they doing the last 4 to 5 months. I wonder if they were the one that coded the virus, malware, spyware etc. themselves. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 324 Last | Next |
The time now is
2:00:54 PM
ET.
Any comment problems? E-mail us |
