Guest Reimar Posted July 13, 2007 Share Posted July 13, 2007 That's mainly affecting system running IE and Firefox together. As I thinkl that's interesting for members of thaivisa because many having IE and Firefox together on one system. Read: That's the latest update from security researchers who initially laid the blame on Microsoft's Internet Explorer for the latest zero-day exploit that also can afflict those using the Firefox Web browser. Users could face a "highly critical" risk if they have both IE and Firefox version 2.0, or later, loaded on their computer. The trouble begins when browsing a malicious site while using IE and it registers a "firefoxurl://" URI (uniform resource identifier) handler, which allows the browser to interact with specific resources on the Web. As a result, users may find their systems remotely compromised. Earlier Tuesday, security researcher Thor Larholm, who discovered the IE flaw, and security research giant Symantec put much of the blame on IE, while Secunia's Thomas Kristensen, chief technology officer, attributed the problem to Firefox versions 2.0 or later. "It's a little bit of both," said Oliver Friedrichs, director of Symantec's Security Response Center. "You have two very complex applications that are not playing well together and leading to a security issue. The components themselves are secure as stand-alone products but not together." "Firefox is the current attack vector, but Internet Explorer is to blame for not escaping...characters when passing on the input to the command line," said Larholm, in response to a reader's comments. "I agree that Firefox could have registered its URL handler with pure DDE (dynamic data exchange, the protocol for information exchange) instead and thereby have avoided the possibility of a command-line argument injection, but IE should still be able to safely launch external applications." Friedrichs noted that while Firefox, which released version 2 in October, has gained in popularity, most Firefox users will also have IE loaded on their computers, since it comes with the Windows operating system. The number of people who may be at risk could be substantial, he added. Meanwhile, Kristensen of Secunia said: "A new URI handler was registered on Windows systems to allow Web sites to force launching Firefox if the 'firefoxurl://' URI was called, like ftp://, http://, or similar would call other applications." But because of the way the URI handler was registered by Firefox, it causes any parameter--which activates a program to perform a particular task--to be passed from Microsoft's Internet Explorer, or another application, to Firefox, when firefoxurl:// is activated. Source: http://news.com.com/8301-10784_3-9741435-7.html Link to comment Share on other sites More sharing options...
raslin Posted July 14, 2007 Share Posted July 14, 2007 (edited) So it's problem unless somebody can tell me how to remove IE from Win98SE. Seems these people haven't addressed reality. Edited July 14, 2007 by Maestro Removed quoted text. Unnecessary to quote the entire, lengthy post. Link to comment Share on other sites More sharing options...
Gumballl Posted July 14, 2007 Share Posted July 14, 2007 (edited) So it's problem unless somebody can tell me how to remove IE from Win98SE.Seems these people haven't addressed reality. It's easy to remove Win98SE, err, I meant IE. Insert a Linux distro CD into your CD-ROM drive and reboot. Then follow the instructions to remove all partitions (especially those containing the Redmond Virus). Edited July 14, 2007 by Maestro Reduced quoted text. No need to quote the entire, lenghty OP. Link to comment Share on other sites More sharing options...
t.s Posted July 14, 2007 Share Posted July 14, 2007 So it's problem unless somebody can tell me how to remove IE from Win98SE.Seems these people haven't addressed reality. if you are running win 98se, you have bigger problems than just firefox and ie. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now