Gaping Holes In Fully Patched IE7, Firefox 2

Continent1106 writes "Hacker Michal Zalewski has ratcheted up his ongoing assault on Web browser security models, releasing details on serious flaws in fully patched versions of IE6, IE7 and Firefox 2.0. The vulnerabilities could cause cookie stealing, page hijacking, memory corruption, code execution, and URL bar spoofing attacks." Here is Zalewski's post to Full Disclosure.

Re:And Opera

[WilliamSChips]

Naw, Opera just randomly crashes and then has a default behavior of restarting the site that causes it to randomly crash.

Woot!

[Anonymous Coward]

Wow, I'm so glad I installed Firefox so I'm immune to all of these IE bugs!

Oh, wait, what did that say?

-AC

Gaping holes?

[Paktu]

Article tagged as goatse.

Lynx

[Anonymous Coward]

I use Lynx, you insolent clod! Get off my lawn!

Sounds like Terrorist to me.

[3seas]

cookie STEALING, page HIJACKING, memory CORRUPTION, code EXECUTION, and URL bar spoofing ATTACKS.

So where the fuck is home land security when you need them.

And Elinks

[gumpish]

No holes for elinks? Oh well...

(sits back in corner with large grin on face)

read b4 clicking, warning , danger !

[weighn]

http://impoll.net/cgi-bin/v.cgi?p=1585&r=0 [impoll.net]
http://impoll.net/cgi-bin/v.cgi?p=1585&r=1 [impoll.net]

following could cause cookie stealing, page hijacking, memory corruption, code execution or URL bar spoofing attacks !!

Re:Lynx

[rustalot42684]

If you can't do it from the command line, you shouldn't do it at all! Who needs pictures, anyways?

AND LYNX!

[Anonymous Coward]

No holes for Lynx? Oh well...
(sits back with biggest grin on face)

Re:Sounds like Terrorist to me.

[Anonymous Coward]

what's so terrible about urls?

Re:Go old NoScript

[tomhudson]

"When are people going to wake-up to this bullshit? "Web apps" give you all the performance of regular apps running on an old 286, with half the features. Wow!"

Hey, I'm running this on a 286, you insensitive clod!

Command line? Hah!

[spun]

You young whippersnappers and your fancy shell doo-dads. In my day, we had to lick a live 10Base5 cable to browse gopher and that's the way we liked it!

Re:Ah well

[rts008]

Thanks for the info! :-)

I can't convince my wife to switch to *nix/BSD, she is used to WinXP and IE 7 from work, and doesn't want to change. :-(

I might be able to sneak Firefox in on her with some creative registry hacks, and some install/configure obfustications. We'll see.

Re:Ah well

[Kelson]

I use wget.

You have not truly experienced the web until you have experienced it using telnet to port 80.

No holes?

[Kelson]

No holes for Opera?

Are you serious? Have you looked at that icon? There's a huge hole right in the middle, and no one seems to acknowledge it!

Re:Woot!

[Mark_in_Brazil]

Wow, I'm so glad I installed Firefox so I'm immune to all of these IE bugs!

Oh, wait, what did that say?

It said the only critical flaw in the bunch is in MSIE 6 only.

This has been another edition of Easy Answers to Stupid Astroturfer Questions.

Re:Well...

[jez9999]

I run Microsoft Windows 95 unpatched, so I am safe. No-one targets this old piece of crap anymore!

Re:Ah well

[jez9999]

I might be able to sneak Firefox in on her with some creative registry hacks, and some install/configure obfustications. We'll see.

I'm glad to see the art of practicing trust in marriage is alive and well!

You mean "Home Page" security

[giafly]

homeland security [newsday.com] is a fairy tale.

Re:Ah well

[MrSenile]

New to marrage, are we? :)