| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Ditch IE - veteran bug hunter | |
|
||
| Time: 14:09 EST/19:09 GMT | News Source: The Register | Posted By: Julien Jay | ||
Veteran bug hunter Georgi Guninski is recommending disabling Active Scripting - or ditching Internet Explorer entirely - after he discovered yet another vulnerability with the browser. IE allows hackers to browse known local files using a specially crafted script due to a bug in the browser's GetObject() JScript function, Guninski reports. The vulnerability, which is similar to previous directory transversal bugs and relates to how GetObject() interacts with the "htmlfile" ActiveX object, could allow the execution of arbitrary code on a target machine. Internet Explorer version 5.5 and 6.0 are thought to be affected. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 213 Last | Next |
The time now is
10:35:08 PM
ET.
Any comment problems? E-mail us |
| #1 By 135 (209.180.28.6) at 1/4/2002 3:43:52 PM |
|
Guninski is a good bug hunter. The problem is I think he fells unappreciated, so he lashes out a lot.
|
| #2 By 1295 (216.84.210.100) at 1/4/2002 3:59:19 PM |
|
You remember that guy in Enemy Of The State that lived in the bubble because he was so paranoid?
Yea... exactly... I hope my life never comes to me freaking out about a small ass security risk. He probably has a Nuclear fall out shelter and a ranch in the country with 3 years of supplies he's trying to sell that he bought for Y2K. God bless paranoid people... just makes me feel better about me :) |
| #3 By 2332 (165.247.2.233) at 1/4/2002 6:10:50 PM |
|
#6 - well, ZDNet (like most news sites) is biased against Microsoft by directive of the editors.
BUT, I am getting quite sick of all the security problems in IE. It wouldn't be so bad if Microsoft released patches more quickly, but some of these Active Scripting bugs have been there for nearly a month now with no fix released. Oh, and ActiveWin reports anything and everything about Microsoft - that's why I love this site. They post both the good and the bad, unlike sites like ZDNet or Slashdot, which slant and skew stories to meet their editorial directives. |
| #4 By 135 (208.50.201.48) at 1/4/2002 7:32:39 PM |
|
#9 - Agreed. I just wish he was a bit more rational, but ohwell.
The guys from w00w00 just got spanked on NTBugtraq today, but then so did AOL for that one found the other day. :) |
| #5 By 1295 (216.84.210.100) at 1/4/2002 7:43:44 PM |
|
#9
I like what he does... but its the manner at wich he does it. I couldn't agree with you more though add on what sodablue(#10) said. I mean... gimme a break... "EVERY ONE SHOULD DROP IE"... a little bit rash. And yes I do listen to him except for disabling active scripting... I allow it because the features out do the downfalls... and I don't go to sites and open e-mails which I don't know #6 One word: penguin-thumper-who-never-reads-the-article-just-the-title-and-then-makes-decision-off-of-no-information-like-a-freaking-moron So someone is exploiting a problem that was fixed a year and a half ago... what's funnier then your post is the fact that ZdNet found that to be news :) |
| #6 By 2062 (209.180.114.179) at 1/5/2002 7:09:58 AM |
|
This guy has spent his life finding bugs in IE, but he wants everyone to not use it. Now whats the logic in that? Why would you find bugs in something you dont use? Maybe he should get a life, a girlfriend, and get laid more than once a year. This guy is almost as annoying as steve gibson from grc.com they both are media hungry idiots.
-gosh |
| #7 By 2332 (165.247.2.209) at 1/5/2002 1:09:00 PM |
|
#14 - While I'm sure you're right in the sense that ZDNet (and, by association, CNet) want to only report "bad" stuff or controversial stuff to get people to read the site, they seem to have a particular hatred for all things Microsoft.
Now, everybody is entitled to their opinion... but these are editorials... these are NEWS sites. It is their responsibility to report in an unbiased manner. This is clearly not what they set out to do. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 213 Last | Next |
The time now is
10:35:08 PM
ET.
Any comment problems? E-mail us |
