Re: Another Scripting Hole In Microsoft IE Exposes Local Files

From: Wolfgang Schelongowski (spamtrap@xivic.prima.de)
Date: 01/03/02

  • Next message: JFighter: "how to issue certificate"

    From: spamtrap@xivic.prima.de (Wolfgang Schelongowski)
    Date: 3 Jan 2002 16:50:49 +0100
    
    

    In <2d18fc63.0201020638.20385cc0@posting.google.com>
     news@privacyexposed.mailshell.com (Robert) writes:

    >"Bulgarian bug hunter Georgi Guninski has discovered another bug in
    >Microsoft's Internet Explorer Web browser that could allow a malicious
    ...
    >simple JavaScript code and Microsoft's ActiveX controls to gain access
    ...

    Both Javscript and ActiveX are known to be insecure by (lack of) design
    for *all* platforms, where they can be executed. It's been known for
    years that they are security risks.

    -- 
    "Some people are heroes. And some people jot down notes."
      -- Terry Pratchett, The Truth
    



    Relevant Pages

    • which HTML code triggers ActiveX dialog?
      ... I wonder which HTML tags or javascript code or whatever, that triggers the ... "Do you want to allow software such as ActiveX controls and ... plug-ins to run?" ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • which HTML code triggers ActiveX dialog?
      ... I wonder which HTML tags or javascript code or whatever, that triggers the ... "Do you want to allow software such as ActiveX controls and ... plug-ins to run?" ...
      (microsoft.public.windows.inetexplorer.ie6.browser)

  • Quantcast