Firefox and IE Still Not Getting Along

juct writes "Heise describes a new demo showing how Firefox running under Windows XP SP2 can be abused to start applications. For this to work, however, Internet Explorer 7 needs to be installed. This severe security problem promises another round in the 'who-is-to-blame-war' between Mozilla and Microsoft. Mozilla currently is leading the race for a patch, as they have one ready in their bugzilla database. 'The authors of the demo note that there are many further examples of such vulnerabilities via registered URIs. What is so far visible is just "the tip of the iceberg". They state that registered URIs are tantamount to a remote gateway into your computer. To be on the safe side, users should, in the authors' opinion, deregister all unnecessary URIs - without, however, elucidating which are superfluous.'"

Comments

Re:!Root

[Himring]

How is parent offtopic? Truly, the vast majority of security woes in Windows is due to the entirely asinine practice instituted by microsoft ages ago wherein root is assumed. This has created both the hallofshame for applications that cannot work without it, and a useless registry entry for anonymous network access wherein, if changed to anything but default (where anonymous access across the network is wide open) then things just stop working in windows networking -- tiny things like, you can no longer see other computer or change your password or get to shares on servers....

If only mod points went to only the really technical member of /.

Solution: DON'T INSTALL IE7

[Filter]

Solution: DON'T INSTALL IE7