Critical vulnerability found in Ask.com toolbar for IE
619820
(InfoWorld) - A vulnerability in Ask.com's toolbar for Internet Explorer could allow an attacker to take control of a person's computer, according to security advisories. The problem concerns a buffer overflow flaw in the toolbar and involves an ActiveX control, according to an advisory posted by security vendor Secunia APS, which rated the problem as "highly critical," its second most severe rating. It affects version 4.0.2 of the toolbar and possibly others. Proof-of-concept exploit code for the vulnerability has been publicly posted on other disclosure forums, with a person named "Joey Mengele" credited with finding the flaw. Ask.com officials contacted in London were not immediately able to comment. The Ask.com toolbar sits below the address bar and can perform a variety of category-specific searches, such as weather information, stock quotes, or search a person's desktop as well as regular Web searching. As of Tuesday afternoon local time,Â WabiSabi Labi, a Swiss company that specializes in selling vulnerability information, was still auctioning the Ask.com toolbar problem for minimum of â¬500 ($705), although no bids were listed. WabiSabi Labi's auctioning of security vulnerabilities has caused a stir among security analysts who believe software companies should be discreetly notified of vulnerabilities and allowed to patch the software so as to not put users in danger. The company maintains security researchers should be rewarded for their work.
663754
Microsoft has confirmed the existence of a vulnerability affecting the Windows Shell. The issue exists in the WebViewFolderIcon ActiveX control, and exploitation could result in an attacker gaining the same rights as a local user.
466055
A newly reported security problem in Microsoft's Internet Explorer (IE) Web browser allows attackers to create a fake Web site that looks exactly like a genuine site.
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
448507
An independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect.
220418
Mozilla disclosed Monday that it had opened up a vulnerability with a previous security fix for its Firefox, Seamonkey, and Thunderbird clients. According to an advisory issued Monday, a new JavaScript issue was introduced that would allow coding from Web content to be exploited to execute arbitrary code.
290860
Security researchers can't decide whether it's in IE or Firefox A serious vulnerability that causes Internet Explorer to launch Firefox and execute a malicious payload is sparking debate about exactly who is responsible for the flaw.â¦
430053
Security firm Secunia reported that the vulnerability affects nearly all browsers, including Internet Explorer, Mozilla, Firefox, Konqueror, Opera, Netscape and Safari.
741417
Microsoft releases critical Explorer patch VNUNet.com
44372
A flaw in the way the Firefox and Opera browsers handle an image file could allow an attacker to see what Web sites a person has visited.
397083
Mozilla has confirmed a vulnerability in its Firefox browser that could be used by attackers to scout out a system before they undertake a more aggressive assault.
60742
On July 10, engineers at Secunia issued a security advisory, rated "Highly Critical," warning Firefox users that their browser could be tricked into executing arbitrary JavaScript code. While Internet Explorer was originally blamed for the ability to trick Firefox, as it turns out, Mozilla admitted today its own browser is to blame, even after a patch was released.
211363
An anonymous reader writes &quot;All browsers have been reported vulnerable to different vulnerabilities today. Starting with: Internet Explorer on XP SP1/SP2, which suffers a new system compromise (of course) vulnerability.
298750
A critical flaw in Microsoft&#39;s Internet Explorer Web browser could allow a hacker to take control of a computer, the world&#39;s largest software maker said Wednesday.
727620
A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla Corp. said it plans to patch the problem in its next Firefox software update.
314789
Recent updates to IE contain a serious regression that leaves systems once more vulnerable to a flaw fixed more than two years ago, according to security researchers.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.