Slashdot Mirror


4 New "Extremely Critical" IE Vulnerabilities

TopherTG writes "Buckle your seat belts folks. On what is looking to be the next Black Tuesday, with rumors of 9 new Windows security patches being released, Secunia is reporting on 4 new vulnerabilities in IE that allow for arbitrary code execution and placing content over other windows. Combined with the new Windows patches, it is likely more Download.Ject and Sasser like viruses will be emerging in the coming months."

5 of 1,081 comments (clear)

  1. Re:Black Tuesday? wth? by cuzality · · Score: 5, Informative

    First hit on Google:

    http://mutualfunds.about.com/cs/1929marketcrash/a/ black_tuesday.htm

    "Black Tuesday is notorious for being the worst day in the U.S. stock market"...

    You didn't even try, did you?

  2. W3schools isn't indicative of the entire web by friedegg · · Score: 5, Informative

    It's skewed highly towards the web developers/more technically inclined, BUT the fact that non-IE browsers are doing so well there is a GREAT sign, as it means web designers are moving away from IE.

    If you want a better general representation of the web, Google's Zeitgeist web browsers graph (from May) is a better place to look. If you zoom in, you do see that the Mozilla based browsers are slowly gaining.

    --
    Google doesn't index user sigs, so stop trying to "Google Bomb" with them.
  3. Re:At what point... by mirko · · Score: 5, Informative

    It's an MSIE5/6 which also support shell: URLs :)

    --
    Trolling using another account since 2005.
  4. Re:Solution: by JimDabell · · Score: 5, Informative

    Put the Windows Update site into the "local sites" zone or whatever Internet Explorer calls it. Set the "local sites" security to the same as the Internet zone, and then switch Active Scripting off in the Internet zone.

    This effectively emulates the domain-specific Javascript settings in other browsers.

  5. The Palm hotsync solution by Dimensio · · Score: 5, Informative

    I just called my boyfriend and asked.

    The solution for Palm hotsync:

    Give the user Administrative-level access.

    Install the Palm software.

    Explicitly grant the user access to the installed Palm files in Program Files (rather than doing it via Group access).

    Remove the user from the Administrators group.

    Voila. Palm hotsync works without Admin rights. The temporary Administrator rights are needed so that the installer can create certain user-specific registry keys. Another way to do it is to install it under an Administrator's account and then export/import the reg keys, but my boyfriend reports that temporarily setting up the user with Admin rights is overall easier.