On TechRepublic: 10 biggest failures in IT history
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 3 of 12:
Next »
« Previous
Windows flaw
IE doesn't directly do any parsing or rendering of animated cursors; it lets the OS do that. Thus, if Firefox supports the same mechanism for a site to use a custom cursor, (a CSS cursor property I believe), it could be used as an attack vector.

But it's not the browsers' fault, it's Windows's. You could also be hacked if you had the malicious cursor on your hard drive, and then used Windows's mouse pointer customization to change the arrow to that cursor.
Posted by: PB_z   Posted on: 03/29/07 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

Windows or IE flaw?  boxmonkey | 03/29/07
Mostly Windows and IE  lostinspace | 03/29/07
Windows flaw  PB_z | 03/29/07
Sounds more like IE  boxmonkey | 03/29/07
Admin Account  register@... | 03/30/07
Not an IE flaw at all  PB_z | 04/01/07
Philosophy  boxmonkey | 04/01/07
Cursor hole puts Windows PCs at risk  Loverock Davidson | 03/29/07
BETTER AND BETTER!!!!!!  galileon | 03/29/07
So looks like Protected Mode works  georgeou | 03/29/07
Reality check  ejhonda | 03/30/07
"Trustworthy Computing"  rpmyers1 | 03/30/07

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
advertisement