You are here: Home | Forum | Still seeing virus infection alert
You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.
security firm secunia has noted a security hole in microsofts internet explorer 6 for windows xp and 2003 that requires 'no user interaction' for the vulnerability to be sucessfully exploited.
Quote:
A boundary error in the handling of certain attributes in the IFRAME HTML tag is the cause of the vulnerability, Secunia has reported.
This can be exploited to cause a buffer overflow via a malicious HTML document containing overly long strings in the "SRC" and "NAME" attributes of the tag. Successful exploitation of the error allows execution of arbitrary code
Agreed - the story doesn't mention whether they already contacted MS about this... any security company worth their salt would do that. If they had already done this then it changes things a bit. Otherwise it is irresponsible of them.
Join CF
You are here: 
