Re: Where is the notificiation about IE zero day vulnerablity?

From: Imhotep (imhotep_at_nospam.com)
Date: 11/28/05 

Date: Mon, 28 Nov 2005 00:38:51 -0500

Shenan Stanley wrote:

> Imhotep wrote
>> Maybe maybe not. Maybe all you can do with the javascript hole is
>> DOS the other browsers (basically causing Firfox to crash but,
>> not allow remote access)...
>
> Karl Levinson, mvp wrote:
>> "All you can do?" So you're rating this as a low severity
>> vulnerability? But you attack Microsoft for supposedly doing the
>> same?
>
> Imhotep wrote:
>> http://xforce.iss.net/xforce/xfdb/20783
>>
>> From that page
>> "It is reported that this vulnerability could be exploited to cause
>> a denial of service on Firefox and Opera Web browsers, but remote
>> code execution is not possible."
>>
>> I certainly could take my web browser crashing over a remote code
>> execution from a web site...but that is just me; call me crazy.
>
> That I can agree with.
>
> Crash or possible infiltration?
>
> Not even a fair choice - I can handle the crashing longer than I can
> handle
> someone executing code on my PC that does something horrible. Plus - if
> it crashes, you repeat and it does it again - going to that page is a
> no-go from that point on and that site will get reported in whatever way I
> can report it to whom-ever I can report it.
>

Exactly...even home users will just avoid the site saying "This site causes
my browser to blow up" not realizing what is really trying to happen. In
either case they are safer...

Imhotep

Relevant Pages

  • Re: Where is the notificiation about IE zero day vulnerablity?
    ... Imhotep wrote ... > a denial of service on Firefox and Opera Web browsers, ... Crash or possible infiltration? ... report it to whom-ever I can report it. ...
    (microsoft.public.security)
  • Re: Endless Safari Crashes
    ... Shawn Hirn wrote: ... doesn't crash at least once a day. ... a Powermac and I run many browsers as part of my work and rarely ...
    (comp.sys.mac.apps)
  • Re: Browser wont print after update
    ... See the Update History section of http://windowsupdate.microsoft.com ... Socalstoker wrote: ... Also, I forgot to mention that what happens is the browsers, all of them, ... crash when I try to print. ...
    (microsoft.public.windowsxp.general)
  • Re: Browser wont print after update
    ... Also, I forgot to mention that what happens is the browsers, all of them, ... crash when I try to print. ... Socalstoker wrote: ... apparently will not allow me to use the parallel port. ...
    (microsoft.public.windowsxp.general)
  • Re: Pattern and texture fills not in browser
    ... I am using IE but if it can't be viewed in other browsers then I won't use ... "Rob Giordano (Crash Gordon®)" wrote: ...
    (microsoft.public.frontpage.client)
Loading