Feeds

IE bug allows full MSN Messenger hijack

I send you this guy's files in order to have a laugh

  • alert
  • submit to reddit

Gartner critical capabilities for enterprise endpoint backup

The recent privacy stuff-up in Messenger "pales in comparison to what can be done if you use MSN Messenger through unpatched IE vulnerabilities," security researchers Tom Gilder and Thor Larholm have discovered.

Among the fun and games one can have with a vulnerable Messenger user are such sports as impersonating the victim and sending spoof messages and spoof e-mail memos to his contacts, and scouring his local drive for interesting files to share around.

In other words, you can do anything with the victim's Messenger client that the owner can do.

A demonstration has been set up here.

The problem is not a bug in Messenger, but one in IE, namely the Document.Open() vulnerability discovered in mid-December by ThePull, which allows for cookies to be gathered and documents to be read. This one is demonstrated here.

There is not yet a patch for this and several other IE holes. Vulnerable systems include:

Windows 98 SE with IE6 final (fully patched as of Feb 9) and MSN Messenger 4.6.0073
Windows 98 SE with IE6 final and MSN Messenger 3.6.0024
Windows ME with IE6 final (fully patched as of Feb 9) and MSN Messenger 4.5.0127
Windows 2000 with IE6 final (fully patched as of Feb 9) and MSN Messenger 4.6.0071
Windows 2000, IE5.5, MSN Messenger 4.6.00.73

Interestingly, MS released a major IE patch late last week but quickly withdrew it. Whether this was because they'd neglected to address this exploit or because the patch was ineffective or because it breaks people's computers we don't know.

A handy reference of yet-to-be-patched IE flaws can be reviewed here. IE users may wish to compare it against the next IE patch, when MS finally gets it sorted out. ®

The essential guide to IT transformation

More from The Register

next story
Assange™: Hey world, I'M STILL HERE, ignore that Snowden guy
Press conference: ME ME ME ME ME ME ME (cont'd pg 94)
Premier League wants to PURGE ALL FOOTIE GIFs from social media
Not paying Murdoch? You're gonna get a right LEGALLING - thanks to automated software
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
Ballmer quits Microsoft board to spend more time with his b-balls
From Clippy to Clippers: Hi, I see you're running an NBA team now ...
Online tat bazaar eBay coughs to YET ANOTHER outage
Web-based flea market struck dumb by size and scale of fail
Amazon takes swipe at PayPal, Square with card reader for mobes
Etailer plans to undercut rivals with low transaction fee offer
Call of Duty daddy considers launching own movie studio
Activision Blizzard might like quality control of a CoD film
US regulators OK sale of IBM's x86 server biz to Lenovo
Now all that remains is for gov't offices to ban the boxes
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.