The failure of Microsoft [NASDAQ:MSFT] to abide by a well-known browser security rule has resulted in a "severe" flaw in the company's Internet Explorer browser, according to security experts.
The security bug, which affects all current versions of Internet Explorer for Windows, including IE 5.5 and IE 6, provides attackers with a grab-bag of techniques for stealing other users' browser cookies, reading some files on their hard disks, and "spoofing" the content of legitimate sites, according to ThePull, an independent security researcher who discovered the vulnerability.
|