Feeds

Microsoft plugs new Internet Explorer security leak

Stops sneaky Webmasters snooping your hard disk

  • alert
  • submit to reddit

Intelligent flash storage arrays

Microsoft has released a patch for Internet Explorer 4 which is designed to seal a security breach that could allow unscrupulous Web site hosts and hackers to read files on a user's hard drive. The so-called Cross-frame Navigate bug effectively allows developers to code pages that will display files on the user's computer. The developer must, however, know the name of the files he or she is seeking. The bug was originally detected by Bulgarian user Georgi Guninski. All versions of Internet Explorer 3 and 4 are vulnerable to the bug, including Windows 95/98/NT and Macintosh platform. However, the patch is only available for IE 4 -- users of version 3 will need to upgrade. Microsoft said the bug also affects software that interprets HTML code through the IE engine, such as AOL. The patches are available from Microsoft's IE Web site. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Lawyers mobilise angry mob against Apple over alleged 2011 Macbook Pro crapness
We suffered 'random bouts of graphical distortion' - fanbois
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.