Slashdot Mirror

← Back to Stories (view on slashdot.org)

Exploit Based On Leaked Windows Code Released

Posted by simoniker on from the nda-never-signed dept.

mischief writes "A post to Bugtraq from SecurityTracker.com reports an Internet Explorer 5 exploit that has been released based on the Win2K code leak: 'It is reported that a remote user can create a specially crafted bitmap file that, when loaded by IE, will trigger an integer overflow and execute arbitrary code.' Only affects IE 5 apparently, but still - it didn't take long!"

2 of 952 comments (clear)

  1. MS's answer by PatrickThomson · · Score: 2, Redundant

    You know what MS's solution to all these bugs will be - upgrade to XP...

    --
    I am one of many. My idea is not unique, nor do I expect my voice alone to sway you. I speak in a chorus of opinion.
  2. Source code leak == reason for Palladium/TCP? by schmaltz · · Score: 1, Redundant

    Just musing, but what if Microsoft wanted to speed the acceptance of their upcoming Palladium-based operating system? What's the best way to do that? Release the source, of course!

    Maybe Mainsoft's just a scapegoat.

    --
    Big Daddy, Johnny, Burp, Aunt Zelda, Scott, Slurp, Big Momma ... where's Siggy?