Cable Forum - View Single Post

Alanmelon · 02-01-2005, 11:53

I got the following with IE6SP2

Medium Risk Vulnerabilities
Microsoft Internet Explorer file:javascript: Cross Domain Scripting Vulnerability (ldy20030910-01)
Description
This bug allows a web site to read the contents of any file on your computer. The web site has to know the exact path and name of the file. A malicious website may also be able to exploit this vulnerability to delete mail from your webmail account or to spoof trusted websites.

Note: Opera browser is not vulnerable to this problem. If you are running Opera you don't need to patch.

Technical Details
It is possible to inject JavaScript code into Search bar and Media bar in Internet Explorer using "file:javascript:.." URL. The code will be execurted in the domain context of the document that was loaded in the bar.

A malicious web site can first open a document from any domain in Search bar and then execute JavaScript code getting access to the document.

There is a technique that allows injecting JavaScript code into Local Computer zone using this vulnerability. This allows a malicious web site to get access to local files and even execute arbitrary code. See "Additional Information" for details.

Recommendations
We recommend using Windows Update to correct this problem.

Update shows no downloads available...any ideas on how to rectify this?

02-01-2005, 11:53	#17
Alanmelon Inactive Join Date: Jul 2003 Posts: 733	Re: Browser Security Check I got the following with IE6SP2 Medium Risk Vulnerabilities Microsoft Internet Explorer file:javascript: Cross Domain Scripting Vulnerability (ldy20030910-01) Description This bug allows a web site to read the contents of any file on your computer. The web site has to know the exact path and name of the file. A malicious website may also be able to exploit this vulnerability to delete mail from your webmail account or to spoof trusted websites. Note: Opera browser is not vulnerable to this problem. If you are running Opera you don't need to patch. Technical Details It is possible to inject JavaScript code into Search bar and Media bar in Internet Explorer using "file:javascript:.." URL. The code will be execurted in the domain context of the document that was loaded in the bar. A malicious web site can first open a document from any domain in Search bar and then execute JavaScript code getting access to the document. There is a technique that allows injecting JavaScript code into Local Computer zone using this vulnerability. This allows a malicious web site to get access to local files and even execute arbitrary code. See "Additional Information" for details. Recommendations We recommend using Windows Update to correct this problem. Update shows no downloads available...any ideas on how to rectify this?