IE Flaw Gives Hackers Access To User Files
snydeq writes "Microsoft warned that a flaw in IE gives attackers access to files stored on a PC under certain conditions. 'Our investigation so far has shown that if a user is using a version of Internet Explorer that is not running in Protected Mode an attacker may be able to access files with an already known filename and location,' Microsoft said in a security advisory. The vulnerability requires that an attacker knows the name of the file they want to access, according to the company."
When you go to my website I know what the cookie name is and I know the default file system location for that cookie. This one seems pretty bad.
I wonder how many people have a "passwords.txt" file in their Documents. ;-)