Internet Explorer susceptible to new market share vulnerability
88321
Jim Barksdale is probably laughing his fool head off. Microsoft&#39;s Internet Explorer, the Web browser with which Microsoft crushed Barksdale&#39;s Netscape Navigator, is slipping in popularity and it&#39;s Microsoft&#39;s own damn fault.
118853
USA Today: &quot;Firefox proponents acknowledge it will have to do a lot more than swipe a few percentage points of market share to pose a significant threat to Explorer.
305434
A vulnerability, which has been detected in Microsoft&#39;s flagship Internet Explorer, can be exploited by malicious users to conduct cross-site scripting attacks.
363180
Floor by flaw The latest versions of Internet Explorer and Firefox on Windows and (in the case of Firefox) Unix systems are vulnerable to attacks that could reveal the contents of sensitive files residing on a victim's hard drives.â¦
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
209227
Security researchers are warning of another pair of vulnerabilities in Microsoft Corp.&#39;s Internet Explorer browser affecting users on fully patched Windows XP Service Pack 2 systems.
210968
com December 17, 2004, 11:40 AM PT. Microsoft is investigating reports of a new Internet Explorer flaw that puts people with the most secure version of Windows at risk of phishing attacks.
352797
InfoWorld - A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla said it plans to patch the problem in its next Firefox software update.
260192
Mozilla will patch a security bug in Firefox that could be attacked in Internet Explorer.
574367
IE exploit code could boost risk of browser mishaps. Microsoft says teamwork makes for better defenses.
591861
A vulnerability in a Java plug-in from Sun Microsystems used by most web browsers poses a risk for users of IE and alternative browsers alike.
217347
Stop us if you've heard this before Security experts warn a new, unpatched vulnerability in Internet Explorer might be used to spread malware. A flaw in Microsoft's Direct Animation Path (daxctle.ocx) ActiveX control, rated as critical by Secunia and other security watchers, has spawned proof of concept code but has not yet become the subject of widespread, hostile attack. Memory corruption is possible even on a fully patched Windows XP system.â¦
42547
(InfoWorld) - Hackers have discovered a new vulnerability in Internet Explorer, and they've released code that could be used to attack users of Microsoft Corp.'s popular browser. The vulnerability is similar to a bug thatÂ Microsoft patched last month in a multimedia component of Internet Explorer, according to Vincent Hwang, a group product manager with Symantec's Security Response team. Though a sample exploit of the vulnerability was posted Wednesday by hackers on the xsec.org Web site, Symantec has yet to see the code used in any attacks, according to Hwang. To take advantage of the exploit code, attackers would first need to trick users into viewing a maliciously encoded Web page, but they could then run unauthorized code on a victim's computer. It is unclear right now which versions of Windows and Internet Explorer are affected by the vulnerability. Researchers at Secunia said they were able to create a "fully working" exploit for the latest version of Windows XP running Internet Explorer 6. Windows 2000 users are also vulnerable, Secunia said. Microsoft security researchers were unavailable to comment on the issue, but a spokesman for the company's public relations agency said that the matter was under investigation. Symantec calls the bug "critical," andÂ Secunia rates the issue as "highly critical," its most severe rating. The xsec.org hackers referred to their code as a 0day, meaning an exploit for a previously undisclosed vulnerability. But one well-known hacker said the flaw was not difficult to find using publicly available security tools, such as the AxMan ActiveX fuzzing software. "Calling it 0day is a stretch," said HD Moore, the head of the Metasploit project, via e-mail. Moore wrote an automated ActiveX testing tool called AxMan that uncovered a handful of IE bugs, including the one exploited by on xsec.org. Although Moore recently launched a project called the Month of Browser Bugs, in which he disclosed a new browser vulnerability every day for the month of July, he said he had refrained from disclosing this particular vulnerability. "This is one of the many exploitable bugs that can be discovered using AxMan and one of the few that I didn't include in Month of Browser bugs due to the ease of exploitation," he said. "I still have three or four left in IE that have similar impact." This is the second unpatched flaw that Microsoft is looking at patching right now. Earlier this month, attackers began exploiting a vulnerability in the company's Word software.
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.
520483
New computer code that exploits a recently disclosed hole in Microsoft&#39;s Internet Explorer Web browser is circulating on the Internet and could allow remote attackers to take full control of vulnerable Windows machines, according to warnings from
91945
Microsoft Corp.&#39;s rock-solid dominance of the Web browser market may be cracking. A new study shows its ubiquitous Internet Explorer browser continues to lose ground to its competitors.
281798
Before the sun set on Microsoft&#39;s Patch Tuesday this month, security firm Secunia discovered a vulnerability in Firefox that malicious hackers could exploit to compromise a user&#39;s system. Here&#39;s the catch: Exploiting the bug depends on interaction between Mozilla&#39;s browser and Microsoft&#39;s Internet Explorer.