Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×
Security

+ - 2 JavaScript holes (with exploits) this week

Submitted by Anonymous Coward
An anonymous reader writes "Double strike this week for Michal Zalewski, who published JavaScript based exploits for two new web browser vulnerabilities. The one disclosed on Monday allows attacker to read sensitive local files on your computer without your explicit permission, and affects both IE 7 and Firefox 2.0.0.1. The other one allows malicious websites to manipulate authentication cookies for third-party sites, and to possibly do other nasty things as well. A patch for the latter bug, notified to Mozilla on Wednesday, has already been developed and will likely be available in a 2.0.0.2 security upgrade. Obviously enough, users of the NoScript Firefox extension are immune from both these attack vectors."

"Life sucks, but it's better than the alternative." -- Peter da Silva

Working...