IE-6 privacy solution backfires

Wednesday, 24 April 2002, 12:03 PM EST

It may seem ironic, but privacy functionality in IE6 makes it possible to launch several attacks against the browser, and against Outlook and Outlook Express, security researcher Thor Larholm has discovered.

"The privacy features added in IE6 to help protect a user's privacy by giving them direct control over cookie management allows any site to read any other site's cookies, in effect removing all privacy. Further, this hole extends to other protocols, allowing you to execute arbitrary commands on the user's machine as well as take over MSN Messenger," Larholm told us.

[ Read more ]




Spotlight

How GitHub is redefining software development

Posted on 26 January 2015.  |  The security industry is slowly realizing what the developer community knew for years - collaboration is the key to and likely the future of innovation.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Wed, Jan 28th
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //