also @ TechSpot: HP Envy/Pavilion revamp, more touchscreens, 3200x1800 LCD, 20" tablet

› ›

IE has critical flaw

By Derek Sooman

On November 22, 2005, 1:08 PM

A zero-day exploit for IE has been published which means that computer users can be attacked simply by visiting a website. The attack allows a remote cracker to take complete control of a Windows system, a proof-of-concept exploit of which has been made available by Computer Terrorism.

The flaw is based on a Javascript Window() vulnerability which Microsoft has known about for several months. However Vole has been mistakenly treating it as a low-priority denial-of-service flaw, a spokesman for Computer Terrorist said.

The exploit works on fully patched Windows XP systems with default IE installations and could be good-night Vienna to anyone using the Microsoft browser.
Microsoft has confirmed that systems running Windows 2000 SP4 and Windows XP SP2 are at risk, but claims that Windows Server 2003 and Windows Server 2003 SP1 systems are safe. The problem does not extend to Firefox or other browsers.

No tags on this story

Post a comment

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Most Popular

Trending Featured
More Trending Topics

Featured on Keyboards

Downloads and Drivers

Downloads   Drivers  

Actual Bookmarks 1.2

KiTTY 0.62.2.3

Funny Photo Maker 2.4.1

PaperScan Free 1.8.8

Audials Tunebite 10.2.22604.400

More Downloads

Latest Discussion

What is the best graphics card my computer can handle? 6 replies on Audio and Video

Network documentation 8 replies on Storage and Networking

The average life of a GPU 17 replies on Audio and Video

Need advice on router-buy 7 replies on Storage and Networking

Graphics Card Question 9 replies on Audio and Video

More Recent Discussion

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.