| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft probes report of IE flaw | |
|
||
| Time: 08:47 EST/13:47 GMT | News Source: CNET | Posted By: John Quigley | ||
|
A new flaw in Internet Explorer could be exploited to launch spoof-based attacks, or access and change data on vulnerable PCs, security experts have warned. The problem lies in the way Microsoft has implemented a JavaScript component in its Web browser, security researcher Amit Klein wrote in a research document. Internet Explorer does not validate some data fields provided by a PC when the component, called XmlHttpRequest, is used, he wrote. The vulnerability could be exploited with specially crafted code. An attacker could spoof a legitimate Web site, access data from the Web browser's cache or stage a so-called man-in-the-middle attack, which taps into traffic between a user and another Web site, according to Klein's write-up. Fully-patched computers running Windows XP with Service Pack 2 and Internet Explorer 6.0 are vulnerable to this issue, security monitoring company Secunia said in an advisory. Secunia rates the problem as "moderately critical" but says people can avoid the risk by setting the security level in IE to "high." | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 149 Last | Next |
The time now is
4:09:43 AM
ET.
Any comment problems? E-mail us |
| #1 By 15406 (216.191.227.68) at 9/29/2005 10:57:40 AM |
|
Another week, another hole.
|
| #2 By 32132 (207.81.85.238) at 9/29/2005 12:01:20 PM |
|
Technically, for IE in 2005, it is 12 holes in 9 months.
For Firefox in 2005, it is 56 holes in 9 months: http://www.mozilla.org/projects/security/known-vulnerabilities.html So, for IE in 2005, it is "another week, another .33 holes. And, For FF in 2005, it is "another week, another 1.55 holes. |
| #3 By 15406 (216.191.227.68) at 9/30/2005 11:21:19 AM |
|
#2: http://www.eweek.com/article2/0,1759,1865087,00.asp?kc=EWRSS03129TX1K0000616
|
| #4 By 32132 (207.81.85.238) at 9/30/2005 10:29:57 PM |
|
# I'll go with one of the commentors:
eWeak: "It's not that Firefox, and other open-source programs, don't have security holes." That's not the story the open source zealots were telling when IE was the one with more vulnerabilities. I also find it hypocritical that Steven should fault Microsoft for releasing too many patches ("The constant flood of Microsoft patching was overwhelming understaffed IT desks.") while praising Fire Fox for quickly releasing patches ("When there's a serious problem, I, for one, would like to have a fix sooner than later."). It seems when Microsoft releases patches sooner rather than later they're evil. But when it comes to Fire Fox such behavior is what makes Fire Fox more secure in Steven's opinion. " Its called moving the goalposts. Open source zealots lied and said Firefox is more secure. Now they admit there are more security holes, but the "real" issue is that get fixed quicker. The truth is, most users aren't patching Firefox. They downloaded .9x or 1.0 or 1.1 when it was "cool" to use Firefox and when liars said it was secure. (Not More secure - secure period). And now millions of people are running very vulnerable versions of Firefox (and 1.07 will turn out to have a dozen exploits in the next week or two). It isn't "secure period" - it is less secure. People were lied to. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 149 Last | Next |
The time now is
4:09:43 AM
ET.
Any comment problems? E-mail us |
