main

Cross Site Scripting Vulnerability in Microsoft WebBrowser Control

configure   on 20 April 2002 - 12:54 · 13 comments & 57 views

Advertisement (Why?)
Thanks Jimmy Daniels for emailing us. A universal cross-site scripting vulnerability exists in Microsoft’s WebBrowser control that an attacker can exploit that can result in elevated privileges and session hijacking of the MSN Messenger client. This vulnerability stems from an error in the validation code in the dialogArguments property. The following software are affected:
  • Microsoft Internet Explorer
  • Microsoft Outlook
  • Microsoft Outlook Express
  • All application that host the WebBrowser control (IE 6.0 or newer).
There is no patch available for this issue yet, however, user could disable scripting as a pre-caution until the patch is available.

News source: Security Administrator - Cross Site Scripting Vulnerability in Microsoft WebBrowser Control
View: More information at Thor Larholm security advisory


"What we have is a simple resistor" that is much faster to access than RAM and can be applied in a thin film that is only a few hundred atomic layers thick, Ignatiev said. He said that when it is produced in volume, thin film memory would be cost-competitive with RAM, and the chip size would be comparable to today's semiconductors. Ignatiev said the thin film technology would likely first be employed to replace the flash memory used in digital cameras and PDAs. (Flash memory is also nonvolatile but is more expensive than RAM and has a more limited number of write cycles.)

The University of Houston is far from alone in trying to develop memory that doesn't require PCs to reboot, according to MIT research scientist Jagedeesh Moodera. He said that Motorola, Siemens, IBM, Hewlett-Packard, NASA and others are all anxious to develop nonvolatile memory, because "you can take it to the Moon, and the same information will be there."

Unlike UH, however, these other groups have been using thin film elements with magnetic properties that can be altered to store the ones and zeros, Moodera said.

Post a comment · Send to friend Comments · There are 13 additional comments

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)