Slashdot Mirror


Highly Critical Hole Found in IE

dotpavan writes "Eweek reports on a highly critical MS Internet Explorer hole found by Secunia Research's Andreas Sandblad. The vulnerability is due to the processing of the "createTextRange()" method call applied on a radio button control. From Secunia, "The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP2." The vulnerability has also been confirmed in Internet Explorer 7 Beta 2 Preview (January edition) though it could be avoided by turning off Active Scripting, as suggested by Microsoft Security Response Center blog. How would this put MS in the market, hit by the ever-growing shots of vulnerabilties? And would the divorce of IE7 from Vista's Windows Explorer help?"

2 of 336 comments (clear)

  1. Re:It's funny by WillAffleckUW · · Score: 0, Redundant

    really? is it anything like LINUX? Linux Is Not Unix.

    --
    -- Tigger warning: This post may contain tiggers! --
  2. Re:Safest browser ever available by TubeSteak · · Score: 0, Redundant
    Maybe the thing to do is to telnet to port 80 and parse the HTML in your head, but then someone will probably find an HTML trick that will drive everyone who reads it insane.
    An ASCII version of the Goatse man

    :shivers:

    --
    [Fuck Beta]
    o0t!