:: Personal website of a Toronto web designer
Lately » Happy B'day WWW; IE vulnerability
Oy Online Solutions Ltd's security experts have found a flaw in Happy Birthday, WWW!
Microsoft Internet Explorer that allows a malicious website to spoof file extensions in the download dialog to make an executable program file look like a text, image, audio, or any other file. If the user chooses to open the file from its current location, the executable program will be run, circumventing Security Warning dialogs, and the attacker could gain control over the user's system.
It's not known whether a patch is going to be produced. Microsoft is currently investigating the issue.
:: Sasha, at 12:00 am on Wednesday, 12. December 2001
Useless scrawling facts:
Top 5 scrawlers:
(updated once a day)
556 Sasha
488 zoka
316 vitez-koja
235 Davor
58 mungos
