Bulgarian bug hunter Georgi Guninski has discovered another bug in Microsoft's Internet Explorer Web browser that could allow a malicious hacker to read the contents of documents on the hard drive of a Web surfer's PC. The security hole, closely related to a bug the Sofia-based security consultant uncovered in September 2000, uses simple JavaScript code and Microsoft's ActiveX controls to gain access to local files. Newsbytes' own tests appeared to confirm Guninski's report that the latest bug can be found in version 6.0 of Microsoft's IE browser for Windows and version 5.5 of the browser for Windows 2000 - both with the latest security patches installed.
|