Microsoft Offers IE6 Crash Solution, Preps IE8
235692
Microsoft's recent set of security patches is causing problems, namely for Internet Explorer 6 users, who are watching their browsers crash midstream when visiting some sites. Redmond has offered a technical workaround to solve the problem until a more formal fix can be developed.
659322
SEATTLE -- Microsoft Corp. released a critical security patch Wednesday to fix a flaw in its Internet Explorer Web browser that could allow an attacker to run malicious software on another person&#39;s computer.
131081
TechWeb - Two new vulnerabilities in Internet Explorer 6.0 -- unveiled by a security firm Wednesday -- could be exploited by hackers to bypass security features in Microsoft's Windows XP SP2.
738749
Three more vulnerabilities in Microsoft&#39;s Internet Explorer 6.0 browser were disclosed Wednesday by Danish security vendor Secunia, bringing the total of IE bugs found by the firm in the last two months to an even dozen.
753365
(InfoWorld) - A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla said it plans to patch the problem in its next Firefox software update. No, that's not a typo, just the strange fall-out from an unusual bug that had security researchers debating the question this week, "Who's to blame? Microsoft or Mozilla?" Security researcher Thor LarholmÂ kicked off the controversy on Tuesday, claiming that he had discovered a flaw that would let an attacker run commands on a victim's PC. In his blog posting, Larholm said the bug was similar to a flaw he'd discovered last month in Apple's Safari 3.0 beta software, and he called it an an "input validation flaw in Internet Explorer." The problem is with a URL protocol handler component of Internet Explorer, he said. This software allows Internet Explorer users to launch applications such as Excel or Firefox by clicking on specially written links on Web pages. When Internet Explorer clicks on a link that launches the Firefox browser, however, the software does not properly check its syntax, and that, Larholm said, lets an attacker create a malicious link, that could be used in an attack. Security vendor Secunia ApS rates the flaw as "highly critical." So while the flaw affects Internet Explorer users, it appears to be a risk only to those who already have Firefox installed. And to make matters more complicated, if a Firefox user were to click on one of the specially written links, he would not be affected. Still, Microsoft Security Program Manager Mark Griesi said that the bug was not his company's problem. "We don't feel that there's an issue in IE and therefore there's nothing to be fixed," he said Tuesday. With Microsoft saying it won't fix the vulnerability, Mozilla said it would change the way its Firefox URL protocol handler worked in its next Firefox update. That will fix Larholm's bug, but Mozilla security strategist Window Snyder wouldn't say whether or not she considered the vulnerability to be an IE or Firefox problem. She did, however, point out that without Microsoft making changes to IE, other Windows programs may be at risk. Noted browser bug-hunter Aviv Raff wrote in his blog that he thought both Microsoft and Mozilla were to blame. But another security expert said that the responsibility to fix the problem lies with the open-source browser developers. "This is an oversight in how Mozilla decided to construct their protocol registration, and how they do input validation between this handler and their application," said Eric Schultze, chief security architect with Shavlik Technologies, via e-mail. "I think Mozilla needs to write and release a patch for this issue and Microsoft can take the week off."
321788
Microsoft on Tuesday issued a patch for an earlier discovered flaw in Visual Studio 2005, while yet another cumulative patch for Internet Explorer was released, as well as one for a vulnerability within the Windows Media Format.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
499517
Over on our sister site, AjaxDeveloper.org today, there's a note about the latest release of Joshua Eichorn's HTML_AJAX PEAR package - version 0.3.1.    HTML_AJAX 0.3.1 is out, lots of good bug fixes, and iframe fallback support for Opera and IE with activeX turned off.  More details are available on the release notes on the wiki.  Feature wise were getting close to beta release, its mainly getting a browser compatability test suite added in and doing some basic API review. If you have experience supporting an API without breaking bc, it would be great to get your feedback on HTML_AJAX.    In the release notes, there's mention of several bugs with Internet Explorer implementations and some yet unsolved problems (IE memory leaks and table support in Konqueror). Check out the rest of the notes for more of the bugs and issues they've taken care of...
346060
pardon the pun -- and for good reason. Web surfers looking for a reliable alternative to Microsoft&#39;s (Nasdaq: MSFT) Internet Explorer have been busy over the last
676055
Three more vulnerabilities in Microsoft&#39;s Internet Explorer 6.0 browser were disclosed by Danish security vendor Secunia. By Gregg Keizer, TechWeb News.
250610
Blog: Critical patches include those for Internet Explorer, Outlook Express and Windows Mail,  Win 32 API, and the Schannel Security Package.
759134
In a seeming replay of the uproar around last year's WMF vulnerability, a third-party patch has been released for the VML hole in Internet Explorer.
166415
Microsoft has released an update to Internet Explorer to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
80336
Editor - FirstScience.com. I have been experimenting of late with various internet browsers as potential replacements for Microsoft Internet Explorer.
467552
Early adopters are discovering that IE7 has compatibility problems with many Web sites and Web applications. Here's how to use IE6 as a backup, or uninstall IE7 completely.
7141
(Article Central) Microsoft released its October batch of security advisories this week, with a number of &quot;critical&quot; patches, including a significant fix for the Internet Explorer browser.
203461
By Doug Stanley  Internet Explorer 7, the first major overhaul of Microsoft's Web browser since 2001, may knock your socks off if you've been using its predecessor exclusively.