SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Non-Tech : Binary Hodgepodge -- Ignore unavailable to you. Want to Upgrade?


To: ~digs who wrote (579)5/9/2003 11:50:43 AM
From: ~digs  Respond to of 6763
 
Microsoft Internet Explorer does not adequately validate references to cached objects and methods
networks.org

Microsoft Internet Explorer features the ability to process scripts contained in HTML documents. This feature is known as Active scripting

By convincing a user to follow a URL or read an HTML email message containing malicious script, an attacker could take any action with the privileges of the user executing the script. This could include opening new browser windows to different sites in different security zones, reading or modifying information in open browser windows, reading files on the local file system, and executing commands that are in a location known to the attacker. An attacker who is able to obtain cookies used for authentication may be able to impersonate a legitimate user and obtain sensitive data such as passwords or credit card information. By leveraging features of the Microsoft HTML Help system, an attacker could execute commands with parameters or cause arbitrary files to be downloaded to a known location on the local system, subject to the user's privileges.

Instructions for disabling Active scripting
cert.org