1 March 2007
Two flaws were discovered in Windows Vista and Internet Explorer 7.
Both were uncovered by FrSIR (French Security Incident Response Team) that rates them as "low risk". The Vista vulnerability is in a component that doesn’t validate user privileges correctly and it allows attacker to steal personal data form PC. It also affects Windows XP, 2000 and Windows Server 2003.
The IE7 flaw is caused by errors in handling some "on unload" events. Cybercriminals could use it to trick user into visiting malicious website. The vulnerability is also exploitable in IE6. Microsoft hasn’t published patches yet.
Source:
http://www.arcabit.com/infobase.html?show=...ion&id=1143
Two flaws were discovered in Windows Vista and Internet Explorer 7.
Both were uncovered by FrSIR (French Security Incident Response Team) that rates them as "low risk". The Vista vulnerability is in a component that doesn’t validate user privileges correctly and it allows attacker to steal personal data form PC. It also affects Windows XP, 2000 and Windows Server 2003.
The IE7 flaw is caused by errors in handling some "on unload" events. Cybercriminals could use it to trick user into visiting malicious website. The vulnerability is also exploitable in IE6. Microsoft hasn’t published patches yet.
Source:
http://www.arcabit.com/infobase.html?show=...ion&id=1143

Help
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Back to top








