Nov 29 2005
Upgraded IE vulnerability
Secunia - Advisories - Microsoft Internet Explorer "window()" Arbitrary Code Execution Vulnerability
This vulnerability has been upgraded to ‘Extremely Critical’ in large part because there is no patch to combat it yet. The only saving grace is that it requires luring a user to surf to a malicious website.
One more reason for you to switch to Firefox if you’re not using it already.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}
Now this has to be one of the most ironic things ever. Your site set off an alert for this exact exploit in my snort box today. As I was reading this post. Haven’t quite figured out what really did it but the source IP is your site and mine was the destination. I may have to send you a screen shot just so you know I’m not full of it.
OK I looked over the rule signature and it just searches for the text string “window()”. Just wanted to make sure no one that I was implying that you are trying to attack anyone.
Still funny though.
OK I looked over the rule signature and it just searches for the text string “window()”. Just wanted to make sure no one thought I was implying that you are trying to attack anyone.
Still funny though.