OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
New IE6 security hole

From: Development SeniorenNet (developmentseniorennet.be)
Date: Wed Jun 08 2005 - 12:17:04 CDT


Hi,

I discovered a NEW security hole / exploit in IE6 with SP2 and all the
latest security patches.

Overview of the exploit:

  a.. Bug for all Microsoft Internet Explorer users
  b.. Can be abused by hackers to run harmful JavaScript code and can be
abused to mislead existing protection against harmful JavaScript code, like
software from Norton, McAfee,.
  c.. Can be abused to mislead the search engines Google, MSN, Yahoo,
AltaVista,.
  d.. Unpleasant for JavaScript programmers

I searched the net about the bug but found nothing, so I really think it is
a NEW bug.

All the information about the new bug (info, exploit,.) , see the page
http://research.seniorennet.be/Techresearch/Javascript_security_flaw_bug_ie_6/security_flaw_bug_javascript_ie_6_internet_explorer.php

Best regards,

Pascal Vyncke