Slashdot Mirror


Another Zero-Day IE Scripting Exploit

billstewart writes "A Computerworld Article reports a pair of vulnerabilities to Internet Explorer that allow Windows machines to be 0wned by a single click on a malicious web page. It was discovered by Dutch researcher Jelmer. As usual, the primary workaround is to disable Active Scripting for any sites that aren't Trusted, but you should have turned off that and Javascript years ago for safety anyway. At least one of the holes is fixed in XP Service Pack 2, but that doesn't fix previous versions of Windows and it's still only beta."

12 of 696 comments (clear)

  1. frist post! by Anonymous Coward · · Score: -1, Offtopic

    0wned!

  2. Am I? by Anonymous Coward · · Score: -1, Offtopic

    teh firstestestest??????????

  3. Mac hole by Anonymous Coward · · Score: -1, Offtopic

    This sounds quite a bit like the recent mac hole... what ever happened with that, I didn't hear anything about a patch for that?

  4. PF by Anonymous Coward · · Score: -1, Offtopic

    FP

  5. Re:BugTraq by Anonymous Coward · · Score: -1, Offtopic
  6. Re:Obligatory by HogynCymraeg · · Score: -1, Offtopic

    For the dude who modded me a troll here's a definition of sarcasm.

  7. mynuts won, & couNTing DOWn? by Anonymous Coward · · Score: -1, Offtopic

    send a message to unprecedented evile (Score:0)
    by Anonymous Coward on Tuesday June 08, @07:40AM (#9364185) tell it in no uncertain terms.

    previously titled:

    va lairIE/robbIE answer yOUR questions interview (Score:mynuts won, TrollBait)
    by Anonymous Coward on Monday June 07, @10:19AM (#9356075)
    is almost ready?

    remember, keep it simple. no questions about the monIE, or gnu online dating. the 'answers' have already been prepared buy a cesspool of ?pr firm? hypenosys talknicians, & will be released as soon as the questions match them.

    it all seems more like some greed/fear/ego based badtoll, where evile WINds up eating it's young, if you ask US?

    this stuff is unbreakable, & wwworks on/in several (more than 3) dimensions.

    from a post meant to be titled:

    unprecedented evile nearly disempowered, forever?
    (score: mynuts won:-) previously PostBlocked(tm) material reposted)

    by a disorganized rag-tag team of a few billion near nobodys, using what was available to them, which was almost nothing?

    & just who are some of unprecedented evile's local representative(s)?:

    The contract was awarded to Accenture, formerly Andersen Consulting, over two competing contractors, Lockheed Martin and Computer Sciences (a veritas (cess)pool of evile stock markp FraUDsters). Several industry executives and analysts said that the award surprised them and that Accenture had widely been considered the outside candidate.

    The award also brought controversy. Accenture is incorporated in Bermuda, and some critics attacked the idea of awarding a contract so valuable and important to national security to a company with its headquarters outside the United States.

    After Accenture was named, Representative Lloyd Doggett, a Texas Democrat, suggested the company took advantage of an uneven playing field to win the contract over Lockheed Martin and Computer Sciences.

    "If companies truly want to contribute to our nation's security, they can pay their fair share of taxes. If they want a slice of the American pie, they had better help bake it," he said in a statement.

    A spokesman for Accenture said that the company paid United States taxes.

    Representative Richard E. Neal, a Massachusetts Democrat and a senior member of the House Ways and Means Committee, also questioned the award.

    "This decision is outrageous," he said, in a statement. "The Bush administration has awarded the largest homeland security contract in history to a company that has given up its U.S. citizenship and moved to Bermuda. The inconsistency is breathtaking."

    the stock markup FraUD/softwar gangster payper liesense hostage grab 'business plan' is looking a little hapless now?

    fauxking billyonerrors. sheesh.

    lookout bullow. tell 'em robbIE?

    all is not lost.

    consult with/trust in yOUR creators.... the returns are immeasurable/infinite.

    see you there?

    Due to excessive bad posting from this IP or Subnet, anonymous comment posting has temporarily (forever, if we had some ept) been disabled. You can still login to post. However, if bad posting continues from your IP or Subnet that privilege could be revoked as well. If it's you, consider this a chance to sit in the timeout corner or login and improve your posting . If it's someone else, this is a chance to hunt them down (like with fuddle's phonIE corepirate nazi bouNTy hunter scam). If you think this is unfair, we just don't care.

  8. OMG U FUKCING DICK I CLIKEH YUOR LINX : I M FUX0RD by Anonymous Coward · · Score: -1, Offtopic

    yeah. dick. :P

  9. Re:Yet another reason.. by micromoog · · Score: 0, Offtopic

    And why can't a post mentioning the GNAA be informative?

  10. Jesus was a nigger! by Anonymous Coward · · Score: -1, Offtopic
    GNAA ANNOUNCES NEW CELEBRITY MEMBER
    Altise - GNAA, Nigeria.
    Arf Arf. International rap sensation Earl 'DMX' Simmons has announce that he swings his gat on the other side of the hood. Our journalists tried to contact the star, whose first four albums debuted at the top of the charts, to find out what his family thought.

    "My wife is obviously devastated that the whole marriage was a sham. As expected, she wants a divorce and custody of the kids, who don't know yet. The truth is I didn't do as many shows as she was led to believe. I am gay and I am now proud after finding out about an organization like the GNAA which has shown me that's there are many black men just like myself who are gay. It don't make a matter in my music and my movies. Truth is, I've been gay for nineteen years. If haters wanna fight me, they can fight these tears. I'm tired of weak ass niggas who can't deal. It's a fact of life and X is still X and will always be X. I'm glad to be on board with the GNAA."

    The GNAA welcomes the hip hop sensation and creator of hit tracks such as "X Gon Giv It 2 Ya" and "Where da hood at?" with open arms. A celebrity of this magnitude should provide some great publicity for the GNAA and get their name out even more.

    Gay/Straight by DMX

    I'm ready for lovin, cause I give head really well.
    Ever since I was 7,
    I've had a gay story to tell.
    You see, anal is great,
    and it's why I'm still givin,
    head to you,
    and I'm a keep on givin.
    The bravery of a man's ass is slavery,
    which defines the man I was made to be,
    cause I'm a nigga who's goin down in history.


    About GNAA:
    GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the first organization which
    gathers GAY NIGGERS from all over America and abroad for one common goal - being GAY NIGGERS.

    Are you GAY ?
    Are you a NIGGER ?
    Are you a GAY NIGGER ?

    If you answered "Yes" to all of the above questions, then GNAA (GAY NIGGER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
    Join GNAA (GAY NIGGER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time GNAA member.
    GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the fastest-growing GAY NIGGER community with THOUSANDS of members all over United States of America. You, too, can be a part of GNAA if you join today!

    Why not? It's quick and easy - only 3 simple steps!

    First, you have to obtain a copy of GAY NIGGERS FROM OUTER SPACE THE MOVIE and watch it. (You can download the movie (~280mb) using BitTorrent, by clicking here.

    Second, you need to succeed in posting a GNAA "first post" on slashdot.org, a popular "news for trolls" website

    Third, you need to join the official GNAA irc channel #GNAA on irc.gnaa.us, and apply for membership.
    Talk to one of the ops or any of the other members in the channel to sign up today!

    If you are having trouble locating #GNAA, the official GAY NIGGER ASSOCIATION OF AMERICA irc channel, you might be on a wrong irc network. The correct network is Niggernet, and you can connect to irc.gnaa.us as our official server. If you do not have an IRC client handy, you are free to use the GNAA Java IRC client by clicking here.


    If you have mod points and would like to support GNAA, please

  11. Mozilla users mod this story... by psykocrime · · Score: 0, Offtopic

    -1 (Boring / Useless)

    --
    // TODO: Insert Cool Sig
  12. Re:What keeps you on Windoze? by Anonymous Coward · · Score: -1, Offtopic
    Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

    I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

    If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

    To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

    Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

    More? Just read though this post and the subsequent replies. I guess this stands on its own.

    More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

    FUD, FUD, FUD, FUD, offtopic FUD