Windows XP SP2 patch already has first new vulnerability 




"The first new vulnerability affecting Internet Explorer on Windows XP with SP2 has been discovered," John Leyden reports for The Register. "The vulnerability allows malicious websites to place an executable file in a user's start-up folder when a user drags or clicks on a program masqueraded as an image. http-equiv of malware.com, a so-called White Hat hacker, has posted a sample exploit which demonstrates security weaknesses in the drag and drop function of IE that give rise to the exploit. Even though this demo depends on the user performing a drag and drop event, it might be rewritten so a user need only perform a single click on an image instead, according to security firm Secunia."

Full article here.

MacDailyNews Take: For our struggling Windows-only friends, if you are interested in information about smoothly adding a safe, secure, elegant, and reliable Mac OS X machine to your computing arsenal, please click here. 

Posted: Fri - August 20, 2004 at 09:37 PM        

©