New IE exploit, even on SP2 systems

By Derek Sooman on October 20, 2004, 4:33 PM
Think you are safe with SP2 installed on your Windows XP box? Shame on you! There is no such thing as safe. Security researchers have discovered a new exploit for Microsoft Corp.'s Windows XP Service Pack 2 that allows programs to be planted and executed on fully-patched systems. The weakness is in the local security zone of Internet Explorer which allows security restrictions in the zone to be bypassed. This, in combination with a separate vulnerability, in which drag-and-drop operations permit executable content to be placed on the system, the end result is an attack that can deliver and execute hostile code on a target system.

Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.