http://securityresponse.symantec.com/avcenter/security/Content/7539.html
UserAgent: Opera/7.11 (Windows 98; U) [en]
Internet Explorer file:// Request Zone Bypass Vulnerability
Moderators: Josh, Don_HH2K, Mandrake
4 posts
• Page 1 of 1
Internet Explorer file:// Request Zone Bypass Vulnerability
by Edward » Sun 18 May, 2003 8:19 am
Symantec Security Response has an advisory about a zone bypass issue involving Internet Explorer versions 5.5 and 6.0 for various platforms.
http://securityresponse.symantec.com/avcenter/security/Content/7539.html
http://securityresponse.symantec.com/avcenter/security/Content/7539.html
-
Edward - Moderator
- Posts: 3584
- Joined: Sun 01 Dec, 2002 7:15 pm
by DJGM » Sun 18 May, 2003 8:27 pm
Up until 20th November 2002, there were 32 unpatched security vulnerabilities in versions of IE for Windows.
Microsoft released a cumulative security patch for IE on that day. On 4th Dec 2002, Microsoft released another
cumulative security patch for IE. On 5th February 2003, another cumulative patch for IE was unleashed by MS.
These cumulative security patches are meant to fix several security vulns at a time, but as of 14th Feb 2003,
there were still 13 unpatched vulns in IE. The number of security craters in IE for Windows increased to 14
on 12th March 2003. Microsoft released yet another cumulative security patch for IE on 23rd April 2003.
This latest patch left behind 10 unpatched vulnerabilities! Since then, that number has crept up to 15
unpatched security holes, some of which are holes that had previously been bandaged, but some of
those digital sticking plasters have obviously gotten wet and dropped off! It's getting to the point
that Internet Explorer for Windows is going to urgently need an internet puncture repair kit!
Microsoft released a cumulative security patch for IE on that day. On 4th Dec 2002, Microsoft released another
cumulative security patch for IE. On 5th February 2003, another cumulative patch for IE was unleashed by MS.
These cumulative security patches are meant to fix several security vulns at a time, but as of 14th Feb 2003,
there were still 13 unpatched vulns in IE. The number of security craters in IE for Windows increased to 14
on 12th March 2003. Microsoft released yet another cumulative security patch for IE on 23rd April 2003.
This latest patch left behind 10 unpatched vulnerabilities! Since then, that number has crept up to 15
unpatched security holes, some of which are holes that had previously been bandaged, but some of
those digital sticking plasters have obviously gotten wet and dropped off! It's getting to the point
that Internet Explorer for Windows is going to urgently need an internet puncture repair kit!
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4b) Gecko/20030516 Mozilla Firebird/0.6
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
-
DJGM - diamond member
- Posts: 4572
- Joined: Wed 19 Jun, 2002 1:03 pm
- Location: Manchester, England, UK
4 posts
• Page 1 of 1
Return to Windows (and Microsoft talk)
Who is online
Registered users: Google [Bot], Yahoo [Bot]
