| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
IE 6 SP1 omits fixes for 20 outstanding flaws | |
|
||
| Time: 14:54 EST/19:54 GMT | News Source: The Register | Posted By: Byron Hinson | ||
|
Researchers have discovered that inadequate security restrictions in Internet Explorer make it possible for an attacker to execute script on any Web page that containing frames. Grey Magic Software describes the vulnerability as critical, a warning backed up by several proof of concept demonstrations. Because of the way frames (and iframes) are handled by IE version 5.5 and above, attackers are able to get to all sorts of mischief with minimal effort. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 317 Last | Next |
The time now is
9:59:27 AM
ET.
Any comment problems? E-mail us |
| #1 By 1845 (12.254.162.111) at 9/10/2002 6:28:52 PM |
| Several of the exploits don't run on my system - Windows XP SP1, WMP 9 beta. Perhaps Microsoft has patched more of these than that site will admit. |
| #2 By 1845 (12.254.162.111) at 9/10/2002 8:20:33 PM |
|
XP Help deleter
Java XMLDSO base tag (of course I have java disabled) FTP Folder View XSS WMP Stench don't seem to affect me. |
| #3 By 5444 (208.180.245.190) at 9/10/2002 10:43:35 PM |
|
SSL man in the middle was repaired in a q file released recently.
with a SP2 nomiker. XPSP1 fixes a few other SSL certificate issues. and other OSes will be recieveing an update soon. Of course if the rumored IE based on the framework arrives. and Activex is sandboxed in the framework security box. most of those secuirty issues will be stamped out fairly quickly. el |
| #4 By 1845 (12.254.162.111) at 9/11/2002 3:39:28 AM |
| IE based on the .NET framework? I'd like more info on that. |
| #5 By 5444 (208.180.245.190) at 9/11/2002 11:46:19 AM |
|
Bob,
Just rumors right now. Office 12 will be based on the .net framework. Office 11 will have some work in the framework. There are rumors along with that and the new shell for Longhorn that a New Browser will be based on the framework. Just as the rumored integration of the Platform SDK and the .net framework SDK for Longhorn(the code name avalon project). and the Enterprise Platform SDK's being written in managed code, with the first of those being the Yukon sql server, and Direct X 9. WSH is the Primary issue for Office scripts and for Outlook viruses and even alot of the vulnabilities in IE and OE. Office 11 is rumored to start moving the scripting to a Framework base while still supporting VBA in some way. Office 12 will see that move entirely(so called trinity), while the System scripting engine will be based on the framework in Longhorn. el |
| #6 By 1845 (12.254.162.111) at 9/11/2002 2:29:44 PM |
| That opens up a world of possibilties. It would also eliminate a good deal of COM interop for those of us already writing .NET apps. |
| #7 By 5444 (208.180.245.190) at 9/11/2002 3:24:09 PM |
|
Bob,
If you write for the NEW UI in Longhorn there shouldn't be any com interop at all. the entire platform SDK should be managed code. The issue is will the platform SDK be retro active to what ever is supported in 2004/5 time frame that Longhorn is released. AFter DX9 for instance 95% of the DX9 sdk should be accessable directly in managed code. in Yukon and the development on that platform 100% should be accessable from managed code. The rumor is that by the time that Longhorn is out. that 100% of the platform sdk will be accessable from managed code. includeing the WIN API. But as I said, will that be only for the Longhorn or for the Entire Platform SDK(I hear the later) el |
|
Write Comment
Return to News |
Displaying 1 through 25 of 317 Last | Next |
The time now is
9:59:27 AM
ET.
Any comment problems? E-mail us |
