Ie Critical Issues

[francois]

hi'

here is the translation of an alert ...

Three "extremely critical" faults in Internet Explorer

Following the discovery of three new vulnerabilities of Internet Explorer considered "extremely critical", the firm of security Secunia advises not to use any more the browser.

Iain Thomson, VNUnet.fr in 11.01.2005

Advertisement

Millions of users of Internet Explorer 6 are under the threat of three "extremely critical" faults of security giving to the hackers the access to PC equipped with the browser, even in case the Pack service 2 ( SP2) of Windows XP was installed.

The first problem concerns the feature of drag-and-drop of the browser, which does not validate correctly files. What means that a document downloaded from internet by the method of the drag-and-drop may contain a hostile program.

Other vulnerabilities affect all the versions of Windows, including those whose local zone was locked via the SP2. The first one allows files specially designed .hkk ) to be used to transport hostile programs on operating systems, whereas the second, by ignoring an error of limitation of zone, could enable(authorize) the involuntary downloading of code from Web sites.

At least one of these faults was indicated to Microsoft last year but no corrective was proposed by the publisher(editor) for the moment. In a bulletin of alert, the firm of security Secunia judges these "extremely critical" vulnerabilities and recommends to the users to abandon Internet Explorer for the benefit of an alternative browser.

" Although millions of dollars are spent on reassuring the SP2, the absolute security is impossible. Thanks to the joint efforts of Michael Evanchik and Paul de Greyhats Security, a critical vulnerability was discovered, capable of putting in danger an operating system without any interaction of the user, by visiting simply a booby-trapped Web page ", warns Secunia.

[translated with prompt5]

francois