IE has a huge, gaping hole

December 11, 2001 7:54 PM

IE has a huge, gaping hole that allows executable files to be downloaded and run on the computers of browsers.

Pynnonen revealed that the bug lies in IE's processing of Internet addresses and "header" information that tells the browser what type of file it is handling. The flaw is particularly dangerous because it can be exploited using ordinary Web page code, without help from JavaScript or other scripting programs, he said.

thanks to the wonder of non-disclosure agreements, we won't know the precise nature of the bug (yet), but this one sounds bad.
posted by moz to General Weblog-Related at 7:54 PM (4 comments total)

Tarnation!
posted by holloway at 8:47 PM on December 11, 2001

You know you've been reading Slashdot too long when...

• That link description scares the hell out of you

posted by holloway at 7:18 PM on December 12, 2001

I was thinking that very same thing myself, holloway.

[shudders]
posted by youhas at 10:31 PM on December 12, 2001

I swear this is ontopic.
posted by holloway at 5:16 PM on December 13, 2001