Post 962

by billso on Wednesday, 9 June 2004

Tech: [print ver­sion] IE flaws used to spread pop-up tool­bar | CNET News.com: “An adware pur­veyor has appar­ently used two pre­vi­ously unknown secu­rity flaws in Microsoft’s Inter­net Explorer browser to install a tool­bar on vic­tims’ com­put­ers that trig­gers pop-up ads, researchers said this week. One flaw lets an attacker run a pro­gram on a victim’s machine, while the other enables mali­cious code to ‘cross zones,’ or run with priv­i­leges higher than nor­mal. Together, the two issues allow for the cre­ation of a Web site that, when vis­ited by vic­tims, can upload and install pro­grams to the victim’s com­puter, accord­ing to two analy­ses of the secu­rity holes. ”

Share

Comments on this entry are closed.

Previous post:

Next post: