On mySimon: Dragon Eye Oolong Tea
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 33 of 36:
Next »
« Previous
Running in the background isn't surfing
The flaw requires that a user manually click on a bogus link. It is highly unlikely that any process that uses portions of IE in the background would automatically enter a bogus link. It is more likely that a straight-up bad link would get inserted into registry settings that such programs read (some nasty spyware does stuff like this).

Someone did bring up Media Player and this could allow a 'work around' for exploitation. However, if one is ditching IE and Outlook why not ditch Media Player too? There are alternatives out there for it as well. The same is true for Office and other MS products that link into IE's functionality. But, if one is going that far, well, you know the drill...

I'd also point out that most current anti-virus software, such as McAfee VirusScan Enterprise, prevents the flaw from working in the first place so if a company has a good security policy they'll be fine. Unfortunately there are a lot of home users and corporations out there without such a security net.
Posted by: jfrankcarr   Posted on: 01/29/04 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

Funny Stuff  JoeMama_z | 01/28/04
So true  Richard Flude | 01/28/04
Does that work?  IT_User | 01/28/04
I think you're fairly safe...  Yen_z | 01/28/04
much safer if...  stephen732@... | 01/29/04
As M$ made IE & its OS inseparable as an anti-competitive imperative...  dicktaurus@... | 01/28/04
But wait. it gets better.  Immanuel Tranz-Mischen | 01/28/04
hahahahahaha  IT-man_z | 01/28/04
opps  JWatson77 | 01/28/04
ever try denying access to the particular executable?  JoeMama_z | 01/28/04
Since I.E. is "part of windows"  Rick_K | 01/28/04
Groundhog Day...  jeutkune | 01/28/04
Yaaaawwwwwnnnn  Bobby Sskcat | 01/28/04
uh yeah  MEMSmaker | 01/29/04
Troll, troll, troll your boat...  Bobby Sskcat | 01/29/04
Here, go check for yourself.  Yen_z | 01/30/04
How many people could be so stupid to use MS products???  DonnieBoy | 01/28/04
please  MEMSmaker | 01/29/04
?Unfixable?  Jack-Booted EULA | 01/28/04
IE can be uninstalled  Spoon Jabber | 01/28/04
but why would you?  MEMSmaker | 01/29/04
BUT..  Bobby Sskcat | 01/29/04
why wouldn't you ...  coffeenite | 01/29/04
Konqueror works nicely...  Spoon Jabber | 01/29/04
Don't bother with those sites  IT_User | 01/29/04
mozilla  Rembrandt Pussyhorse | 01/29/04
Yeah, think it's your settings  IT_User | 01/29/04
Video Problem  Yen_z | 01/30/04
Because it is valueless...  IT_User | 01/29/04
Question from a non-techie  copygod74 | 01/28/04
Unlikely  jfrankcarr | 01/28/04
not unlikely  stephen732@... | 01/29/04
Running in the background isn't surfing  jfrankcarr | 01/29/04
Answer  Mack DaNife | 01/29/04
Almost right  voska | 01/29/04
Just you  FilledOut | 01/30/04

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
advertisement

SmartPlanet

Click Here