Slashdot Mirror


Highly Critical Hole Found in IE

dotpavan writes "Eweek reports on a highly critical MS Internet Explorer hole found by Secunia Research's Andreas Sandblad. The vulnerability is due to the processing of the "createTextRange()" method call applied on a radio button control. From Secunia, "The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP2." The vulnerability has also been confirmed in Internet Explorer 7 Beta 2 Preview (January edition) though it could be avoided by turning off Active Scripting, as suggested by Microsoft Security Response Center blog. How would this put MS in the market, hit by the ever-growing shots of vulnerabilties? And would the divorce of IE7 from Vista's Windows Explorer help?"

2 of 336 comments (clear)

  1. Re:Dupe! by MightyMartian · · Score: 0, Troll
    Internet Explorer has a serious security hole. Water is wet. Fire is hot. Bill O'reilly is a closet gay nazi.

    Wake me up when there's something new to report.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  2. Re:But they spend 20 billion on making windows sec by KingMotley · · Score: 0, Troll

    Tool.