According to security firm Secunia, the just-released Internet Explorer 7 contains a "Redirection Information Disclosure" vulnerability, which allows one site to fetch data from another site through the browser, which opens it up to all kinds of cross-site scripting (XSS) attacks. Interestingly, the same vulnerability has been known and unpatched in IE6 since April. It's one thing not to patch an old browser, but seems quite another to release a brand new browser with the same vulnerability that you've been aware of for six months. If you're running Internet Explorer and want to see the exploit in action, Secunia has set up a demo page.
Advertise with Download Squad
| # | Blogger | Posts | Cmts |
|---|---|---|---|
| 1 | Lee Mathews | 50 | 50 |
| 2 | Brad Linder | 45 | 5 |
| 3 | Christina Clark | 20 | 6 |
| 4 | Christina Warren | 16 | 12 |
| 5 | Victor Agreda, Jr. | 12 | 10 |
| 6 | Jay Hathaway | 11 | 1 |
| 7 | Dolores Parker | 8 | 10 |
| 8 | Kristin Shoemaker | 5 | 6 |
| 9 | Jason Clarke | 4 | 1 |
| 10 | Lisa Hoover | 4 | 1 |
| 11 | Gordon Finlayson | 1 | 0 |
| 12 | Sue Polinsky | 1 | 1 |
apple myspace google portable twitter friendfeed iPhone digg linux images windows music vista flash utilities facebook storage OsX image search pandora Audio plugin microsoft windows-xp rss addons youtube Last.fm SocialNetworking googleholic web2.0 mobile adobe ubuntu google-chrome mp3 video WebServices gmail comments tweet-this funny backup firefox flickr bookmarks browser torrent opera
Other Weblogs Inc. Network blogs you might be interested in:
