Flaw weakens Linux computers

**cloverm** · 03-12-2002, 02:48 PM

cloverm found it very quickly, there's a thank you in member to member for the link to LJR.

Correction, Linux Community.
I found a hit in the server's log from the site to LJR.

**Feztaa** · 03-12-2002, 04:09 PM

there's a thank you in member to member for the link to LJR.

That's where I found the link. The same exploit exists on many pages, but yours was the first URL I could think of, rick.

**Feztaa** · 03-12-2002, 11:11 PM

If anybody cares, the details of the vulnerability can be found here, which is not clouded by ZDNet sensationalism.

**stryder144** · 03-14-2002, 08:30 PM

There is an exploit for IE5.5 that allows any HTML file to run any arbitrary code even when scripting is disabled and security settings are maxed out in the browser. It has been weeks, if not months, and MS hasn't even acknowledged that the exploit exists.

Heck, it works on IE 6 (which, admittedly, is just 5.5 with some 'enhancements'), so I don't think that they are in any rush to fix the problem to which the link refers. Got to love Microstink.