Digital Edition

SYS-CON.TV
"Extremely Critical" Vulnerability in Internet Explorer 6.0 With XP Security Pack 2 Demonstrated
Internet Explorer Command Execution Vulnerability Test Available From Yesterday

For users running Internet Explorer 6 with Windows XP SP2 installed, the Danish-based security firm Secunia yesterday published a demonstration of the vulnerability. The vulnerabilities can be exploited by malicious people to compromise a user's system, conduct cross-site/zone scripting and bypass a security feature in Microsoft Windows XP SP2. It rates the problem "extremely critical."

The demonstration is here.

Secunia's proposed solution is uncompromising: "Use another product."

Alternative workarounds, it adds, include disabling the "Drag and drop or copy and paste files" option and setting the security level to high for the "Internet" zone.

About Security News Desk
SYS-CON's Security News desk trawls the world of security for news of software, hardware, products, and services that seems likely to be of interest to infosec professionals and summarizes them for easy assimilation by busy IT managers and staff.

In order to post a comment you need to be registered and logged in.

Register | Sign-in

Reader Feedback: Page 1 of 1

If Windows is to be hacker-proof, us the customers might just have to make a few sacrifices, like the elimination of backwards-compatibility, web sites should have fewer features, the interface should be LESS user friendly, etc.

Kinda like gravity: It makes planes crash AND it lets us be able to walk and live normal life without floating.

Why pay for an operating system if it's buggy, and they do the bug testing on you for free? We hear about these vulnerabilities almost daily - there are better alternatives: linux, macOS, anything but microsoft folks!

I believe there are now exploits in the wild, or exploits poised to get out in the wild -- which is why the rating was increased.

Having a vulnerability is like having a broken lock on a window. An exploit of that vulnerability is a burgular who is going around your neighborhood using windows as the entry point. In my opinion, exploits are a more serious concern than the vulnerability itself and warrant the increased amount of news on the topic.

Hold on. Isn't this the same issue they found a couple of months back, that the "experts" said WOULDN'T be exploitable? What just happened??

///Secunia's proposed solution is uncompromising: "Use another product."///

Wow - they don't mince words in Denmark. This is a well-respected, neutral company, saying "drop XP with SP2." Poor old Microsoft, not a happy day for them.




ADS BY GOOGLE
Subscribe to the World's Most Powerful Newsletters

ADS BY GOOGLE

Having been in the web hosting industry since 2002, dhosting has gained a great deal of experience w...
NanoVMs is the only production ready unikernel infrastructure solution on the market today. Unikerne...
CloudEXPO | DevOpsSUMMIT | DXWorldEXPO Silicon Valley 2019 will cover all of these tools, with the m...
SUSE is a German-based, multinational, open-source software company that develops and sells Linux pr...
Your job is mostly boring. Many of the IT operations tasks you perform on a day-to-day basis are rep...
Technological progress can be expressed as layers of abstraction - higher layers are built on top of...
When building large, cloud-based applications that operate at a high scale, it’s important to mainta...
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, disc...
Big Switch's mission is to disrupt the status quo of networking with order of magnitude improvements...
Lori MacVittie is a subject matter expert on emerging technology responsible for outbound evangelism...
Dynatrace is an application performance management software company with products for the informatio...
In his session at 21st Cloud Expo, Michael Burley, a Senior Business Development Executive in IT Ser...
All in Mobile is a mobile app agency that helps enterprise companies and next generation startups bu...
Yottabyte is a software-defined data center (SDDC) company headquartered in Bloomfield Township, Oak...
Serveless Architectures brings the ability to independently scale, deploy and heal based on workload...
Whenever a new technology hits the high points of hype, everyone starts talking about it like it wil...
Every organization is facing their own Digital Transformation as they attempt to stay ahead of the c...
"Calligo is a cloud service provider with data privacy at the heart of what we do. We are a typical ...
Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (No...
Chris Matthieu is the President & CEO of Computes, inc. He brings 30 years of experience in developm...