Slashdot Mirror
Extremely Critical IE6/SP2 Exploit Found
Spad writes "Secunia is reporting on three vulnerabilities in IE6 running on XP SP2. Any of these, in combination with an inappropriate behaviour where the ActiveX Data Object (ADO) model can write arbitrary files, can be exploited to compromise a user's system. Moreover, the vulnerability can be used to delete files from the user's system. Secunia says 'Solution: Use another product.'"
They've also posted a test site.
No, you click it first.
delete IE?
or maybe install Firefox?
If tyranny and oppression come to this land, it will be in the guise of fighting a foreign enemy. - James Madison
Even a fully patched sp2 is in danger. Good news for Firefox fanboys?
Well, you've been lucky, one of these days you are going to run afoul of one of the more dangerous internets.
This post is both insightful and flamebait at the same time. I love how objective people are(n't.)
Well, there's always hoping for this to happen....
Y'know, you blow up one sun and suddenly everyone expects you to walk on water.
it's an IE feature.
I have made my own little extreme sport out of it. I fill my old box with all of my financial information, and surf around using IE. I think Microsoft is pretty impressed, because they keep sending me boxes of Viagra and dog crap.
#!/microsoft/bash
After today's pro-Microsoft articles, its about time we got back to bashing!
Internet Explorer Script Error
An error has occured in the script on this page.
Line: 2
Char: 324
Error: Unterminated string constant
blaablaablaa
Do you want to continue running scripts on this page?
Hell no!
You don't know what you don't know.
You know what? I'll just stop using the internet. I'll just .................
I'd hug mine but i'm enjoying the blowjob it's giving me at the moment.
/hug Browsers-other-than-IE
/hug Linux
/hug FreeBSD
/hug OpenBSD
/hug NetBSD
/hug All-the-other-BSDs
/hug All-OSes-and-architectures-that-are-not-windows-on -x86
If they reported the evening news the same way it would sound like this: "Today terrorists announced they have armed an atomic bomb in the middle of Los Angeles. They also announced that they have control of several hand grenades and also some water balloons and cap guns, and they're not afraid to use them!"
main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
Re:Delete files? (Score:0, Redundant)
by Neuroelectronic (643221)
This should be modded redundant. [...]
Priceless :-)
Beachball of death is just so much more fun and sunny sounding than blue screen of death! MS should've reworked their PR on that one.
Actually, I would have said it was more like "Today terrorists have announced that they have armed an atomic bomb in the middle of Los Angeles. If it goes off, it may burn you!"
"Fool me once, shame on you. Fool me 621498 times, shame on me."
GWB said that, right?
Hey can someone please tell me how I can find out where my windows is installed? It says here http://secunia.com/internet_explorer_command_execu tion_vulnerability_test
that windows needs to be installed in c:\windows\ for their test exploit to work 'properly'
Computer specs: iBook g3 800mhz...
I hope that helps a little
...(reported to Microsoft on 2004-10-13).
That's almost whole 3 months. And since then no vendor patch for such a critical bug found in a major product. Not even a warning or anything. That must be the service that any microsoft software user would expect. Wondering if this is a promotion campaign for their new virus and spyware tools.
This bug and some recent others again proved that Microsoft embedded Internet Explorer in such a way that you can't distinguish it from Windows Explorer.
I couldn't get the site to work on my 1936 Stutz Bearcat. I tried attaching an onion to my belt. It was a yellow onion because those were the style at the time...
It would be cool if it didn't suck.
I just e-mailed Steve Jobs basically the same thing about the Safari Browser. If Apple ever hopes to make it into the enterprise, they're going to have to include at least equivalent functionality for developers to, er, exploit.
It's not offtopic, dumbass. It's orthogonal.
Ohhh geez, I can just imagine the image:
Blue sky
Bright yellow sun
White fluffy clouds
Cheezy rainbow across the sky, and under the arc of the rainbow:
A FATAL EXCEPTION 0E HAS OCCURRED AT 0157:BF7FF831
Green grass
Smiling happy sunflowers
Pink fluffy bunnies hopping around and singing happy happy songs and dancing with the sunflowers.
PRESS CONTROL+ALT+DELETE TO RESTART YOUR COMPUTER. YOU WILL LOSE ANY UNSAVED INFORMATION IN ALL APPLICATIONS.
HAVE A HAPPY DAY!
-
- - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.