Newsletter Archives
-
0day reported in Internet Explorer 6 and 7
Of course you use Firefox (or Chrome or Opera), so this shouldn’t concern you too much. But if you use the older versions of Internet Explorer, you should get with the system and start using a different browser.
Symantec reports that they’ve confirmed a 0day attack vector for IE 6 and IE 7, which was posted earlier on BugTraq.
The exploit currently exhibits signs of poor reliability, but we expect that a fully-functional reliable exploit will be available in the near future… The exploit targets a vulnerability in the way Internet Explorer uses cascading style sheet (CSS) information… the attack requires JavaScript to exploit Internet Explorer.
The moral of the story? Get Firefox.
UPDATE: Microsoft has acknowledged the security hole in Security Advisory 977981. The bottom line: get Firefox.
Â