[4648] in WWW Security List Archive
Re: Big IE hole
daemon@ATHENA.MIT.EDU (Prentiss Riddle)
Tue Mar 4 13:39:12 1997
From: Prentiss Riddle <riddle@is.rice.edu>
To: danielr@ccs.neu.edu (Daniel Rinehart)
Date: Tue, 4 Mar 1997 10:25:04 -0600 (CST)
Cc: www-security@ns2.rutgers.edu
In-Reply-To: <Pine.SUN.3.95.970303224043.14862S-100000@stockberg.ccs.neu.edu> from "Daniel Rinehart" at Mar 3, 97 10:42:37 pm
Errors-To: owner-www-security@ns2.rutgers.edu
> Date: Mon, 3 Mar 1997 22:42:37 -0500 (EST)
> From: Daniel Rinehart <danielr@ccs.neu.edu>
> To: www-security@ns2.rutgers.edu
> Subject: Big IE hole
>
> http://www.news.com/News/Item/0,4,8447,00.html
>
> Windows can be hacked through IE
> By Nick Wingfield
> March 3, 1997, 5:15 p.m. PT
>
> Internet Explorer contains a security hole that could
> allow hackers to completely bypass the browser's
> built-in checks for screening dangerous code.
...
For what it's worth, Microsoft has promised that a bug fix is "hours
away":
http://www.microsoft.com/ie/security/update.htm
And for anyone who missed it the first time, the web page of the
discoverers of the problem is at:
http://www.cybersnot.com/iebug.html
-- Prentiss Riddle ("aprendiz de todo, maestro de nada") riddle@rice.edu
-- RiceInfo Administrator, Rice University / http://is.rice.edu/~riddle
-- Home office: 2002-A Guadalupe St. #285, Austin, TX 78705 / 512-323-0708