Forgot your password?
typodupeerror
Security

+ - 2 JavaScript holes (with exploits) this week

Submitted by Anonymous Coward
An anonymous reader writes "Double strike this week for Michal Zalewski, who published JavaScript based exploits for two new web browser vulnerabilities. The one disclosed on Monday allows attacker to read sensitive local files on your computer without your explicit permission, and affects both IE 7 and Firefox 2.0.0.1. The other one allows malicious websites to manipulate authentication cookies for third-party sites, and to possibly do other nasty things as well. A patch for the latter bug, notified to Mozilla on Wednesday, has already been developed and will likely be available in a 2.0.0.2 security upgrade. Obviously enough, users of the NoScript Firefox extension are immune from both these attack vectors."

The rich get rich, and the poor get poorer. The haves get more, the have-nots die.

Working...