Explorer Plagued With Cross-Site Scripting Flaw
305434
A vulnerability, which has been detected in Microsoft&#39;s flagship Internet Explorer, can be exploited by malicious users to conduct cross-site scripting attacks.
121116
XSS marks the spot Think you've protected your web applications from cross-site scripting (XSS) vulnerabilities? The odds are against you. Roughly 90 per cent of web applications have this problem, and it's getting worse as web applications and web services share more and more data.â¦
347931
A fix for a serious flaw in Microsoft's Internet Explorer has been released early to combat escalating attacks.
603807
(InfoWorld) - A critical bug in the Internet Explorer (IE) browser also affects users of the Outlook 2003 e-mail client, making it much more serious than previously thought. The vulnerability can be triggered when IE or Outlook 2003 processes Web-based graphics code written in the Vector Markup Language (VML). It wasÂ first reported Monday by researchers at Sunbelt Software Inc. Attackers have not yet begun exploiting the e-mail attack, but aÂ handful of Web sitesÂ now serve the code, and hackers have publicly posted software that exploits the vulnerability. Initially, researchers thought that only Internet Explorer was vulnerable to attacks that exploited this flaw, but Sunbelt has now concluded that Outlook 2003 users are also at risk. That's because researchers have discovered a way to execute malicious code without using scripting code, which would normally be blocked by Outlook. By embedding a machine-language "shellcode" program in the VML tags, researchers have been able run unauthorized software on systems running the latest version of Outlook 2003. This has raised concerns because it means that some victims could have their PCs compromised with little or no user action. To attack Internet Explorer, criminals would first need to trick users into visiting a malicious Web site. But with an Outlook attack, it becomes much easier to target a victim. "All you have to do is send an HTML e-mail and the user is hosed," said Eric Sites, Sunbelt's vice president of research and development. Researchers at VeriSign Inc's iDefense unit have also confirmed that some configurations of Outlook will launch the code with no user action, said Ken Dunham, the director of the iDefense Rapid Response Team. Users who have Outlook's Reading Pane enabled to read messages in HTML are particularly vulnerable to this attack, Dunham said. Outlook Express users do not appear to be at risk, said Sites. Microsoft is advising users who want to protect themselves to set Outlook to read e-mail messages in plain text format. Instructions describing how to do this can beÂ found here. Microsoft's advisory on the VML issue can beÂ found here. Sunbelt has posted aÂ workaround for the vulnerability. According to one researcher, Outlook 2003 should not be rendering VML code automatically, but the product appears to be vulnerable due to a second bug in Microsoft's software. "Some versions of Outlook will render VML despite the fact that they shouldn't," said Russ Cooper, a senior information security analyst with Cybertrust Inc. "We should be raking Microsoft over the coals for this." Sites agreed that "there seems to be a bug in the latest version of Outlook." Microsoft executives were not immediately available to comment for this story. Microsoft plans to patch the VML problem as part of its next set of security patches, due Oct. 10, but Sites believes that hackers may force the software vendor to rush out an early fix. "I think it will get bad enough that they will have to," he said. Â
753365
(InfoWorld) - A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla said it plans to patch the problem in its next Firefox software update. No, that's not a typo, just the strange fall-out from an unusual bug that had security researchers debating the question this week, "Who's to blame? Microsoft or Mozilla?" Security researcher Thor LarholmÂ kicked off the controversy on Tuesday, claiming that he had discovered a flaw that would let an attacker run commands on a victim's PC. In his blog posting, Larholm said the bug was similar to a flaw he'd discovered last month in Apple's Safari 3.0 beta software, and he called it an an "input validation flaw in Internet Explorer." The problem is with a URL protocol handler component of Internet Explorer, he said. This software allows Internet Explorer users to launch applications such as Excel or Firefox by clicking on specially written links on Web pages. When Internet Explorer clicks on a link that launches the Firefox browser, however, the software does not properly check its syntax, and that, Larholm said, lets an attacker create a malicious link, that could be used in an attack. Security vendor Secunia ApS rates the flaw as "highly critical." So while the flaw affects Internet Explorer users, it appears to be a risk only to those who already have Firefox installed. And to make matters more complicated, if a Firefox user were to click on one of the specially written links, he would not be affected. Still, Microsoft Security Program Manager Mark Griesi said that the bug was not his company's problem. "We don't feel that there's an issue in IE and therefore there's nothing to be fixed," he said Tuesday. With Microsoft saying it won't fix the vulnerability, Mozilla said it would change the way its Firefox URL protocol handler worked in its next Firefox update. That will fix Larholm's bug, but Mozilla security strategist Window Snyder wouldn't say whether or not she considered the vulnerability to be an IE or Firefox problem. She did, however, point out that without Microsoft making changes to IE, other Windows programs may be at risk. Noted browser bug-hunter Aviv Raff wrote in his blog that he thought both Microsoft and Mozilla were to blame. But another security expert said that the responsibility to fix the problem lies with the open-source browser developers. "This is an oversight in how Mozilla decided to construct their protocol registration, and how they do input validation between this handler and their application," said Eric Schultze, chief security architect with Shavlik Technologies, via e-mail. "I think Mozilla needs to write and release a patch for this issue and Microsoft can take the week off."
299
Updated: A &quot;cumulative security update&quot; plugs eight holes in the Internet Explorer browser, while other patches address &quot;critical&quot; vulnerabilities in the Windows shell, in SMTP and elsewhere.
200263
Secunia issued a warning that the so-called tabbed browsing function in many alternative Web browsers from Mozilla, Opera, Netscape, Avant, Camino and others leave users vulnerable to spoofed
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
737101
Dubbed MyDoom.AH by security firms, this latest variant in the MyDoom family of worms is exploiting the recently publicised vulnerability in Microsoft Internet Explorer&#39;s (IE) IFRAME buffer overflow.
59425
Does your email program accept hidden JavaScript commands?
96676
Microsoft on Wednesday released an update to Internet Explorer (IE) to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
336569
A security issue has been discovered in a common feature included in several Web browsers, including Mozilla, Firefox, Opera, Konqueror and Camino.
465721
Recent months have been terrible for Internet Explorer. Their have been tons of bug and security flaw reported. So much so, many security agencies have started recommending people who surf online to shift to alternate browsers.
602689
(InfoWorld) - Hackers are taking advantage of aÂ newly discovered vulnerability in Internet ExplorerÂ to install spyware on PCs that visit a number of Russian porn sites. The malware, first reported Monday by researchers at Sunbelt Software Inc., takes advantage of an unpatched flaw in the way IE processes Vector Markup Language (VML) code. VML is a language used to display graphic information on the Web. The attack appears to work on all versions of Windows running the IE 6 browser, said Eric Sites, Sunbelt's vice president of research and development. "It's not an operating system-dependent issue," he said. Sunbelt first discovered the malware on a Russian porn site late Friday. "This site and a couple of others use an exploit kit called Web Attacker, and it looks like the Web Attacker kit has been upgraded to include this new exploit," Sites said. Since Friday, Sunbelt noticed that the attack code has popped up on about a half-dozen Russian porn sites. In addition, since security researchers estimate that Web Attacker is used by nearly 1,000 Web sites, this latest exploit should soon become more widespread. Web Attacker is a software development kit sold for as little as US$20 to criminals looking for an easy way to develop malware. "Since it's being built into the next version of the Web Attacker kit, we expect that this thing will be everywhere in a few days," said Sites. Whether the attacks will be widespread enough for Microsoft to rush to patch the flaw remains to be seen. On Tuesday, Microsoft confirmed the Sunbelt team's findings, and said it planned to fix the VML bug in its next set of security patches, scheduled to be released on Oct. 10, "or sooner as warranted," according to a statement from the company's public relations agency. This is the second unpatched flaw found in IE over the past week. On Sept. 14, researchers posted code that could be used to exploit a different vulnerability in a multimedia component of Internet Explorer. Microsoft is still investigating that flaw and is not saying whether it too will be patched next month. Sunbelt says that users can avoid the VML attack by disabling Javascript on their browsers. More information can be found on the Sunbelt blog,Â located here.ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
195633
Drive-by downloads Hackers are taking advantage of a new, unpatched Internet Explorer vulnerability to infect users visiting pornographic websites.â¦
450718
If you&#39;re a Netscape fan, you&#39;ve probably run into websites that require you to fire up Internet Explorer in order to see the site properly.
727620
A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla Corp. said it plans to patch the problem in its next Firefox software update.