IE-6 privacy solution backfires

Wednesday, 24 April 2002, 12:03 PM EST

It may seem ironic, but privacy functionality in IE6 makes it possible to launch several attacks against the browser, and against Outlook and Outlook Express, security researcher Thor Larholm has discovered.

"The privacy features added in IE6 to help protect a user's privacy by giving them direct control over cookie management allows any site to read any other site's cookies, in effect removing all privacy. Further, this hole extends to other protocols, allowing you to execute arbitrary commands on the user's machine as well as take over MSN Messenger," Larholm told us.

[ Read more ]




Spotlight

Total cost of average data breach reaches $3.8 million

The average consolidated total cost of a data breach is $3.8 million, according to a Ponemon Institute study of 350 companies spanning 11 countries. The average cost incurred for each lost or stolen record containing sensitive and confidential information increased from $145 to $154.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Thu, May 28th
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //