E-Mail:
Get our new Windows 7 eBook (PDF) for $7 with 70+ Tips. Download Now!

Internet Explorer 0day Exploit Requires Firefox. Huh?

  • No Related Post

There is a new zero day exploit for Internet Explorer circulating but it requires that you have previously installed Firefox for it to work on a system.

The exploit code demonstrates the vulnerability using the Mozilla Firefox firefoxurl:// URL protocol. To trigger this vulnerability, an attacker must persuade a user who has previously installed Firefox or currently has it installed to access a specially crafted web page with Internet Explorer.

At this writing, there are no easy workarounds other than to avoid untrusted web sites.

[Firefox "firefoxurl" URI Handler Registration Vulnerability]

[tags]antivirus, antivirus software, anti virus, anti virus software[/tags]

2 Comments

Michael B. Johnson

July 13th, 2007
at 10:24am

Pretty neat trick!

[...] The flaw needed a certain degree of user- interaction (lockergnome) to be activated and the folks at Mozilla have patched the issue in their 2.0.0.5 browser release. What’s deeply intriguing about the flaw is how it uses the interface among the applications (in this case IE and Mozilla) to launch an attack. The flaw sparked a lot of sparring between executives of Mozilla and Microsoft(TechWorld), each blaming the other’s API call for the flaw. Software makers can ensure a lot of security around their internal code but when it comes to APIs they expose to third party software, the usage is in the hands of the third party and may present vulnerable end-points. [...]

What Do You Think?

 

Posted Recently

SimpleTech by Hitachi 500 GB Portable External Hard Drive for $70 + Free Shipping!

Seagate 1.5 TB SATA Hard Drive for under $100 + Free Shipping!

Up to 40% off Logitech Harmony One Touch Screen Advanced Universal Remote + Free Shipping!

Motorola Droid A855 Phone for only $150 + Free Shipping!

Up to $200 off Data Robotics DroboPro 8-Bay USB 2.0/FireWire 800/iSCSI Storage Array

Up to $30 off Apple Mac mini with 2.53 GHz Core 2 Duo + 320 GB HD + 4 GB RAM + Free Shipping!

Nintendo Wii Console with Wii Fit Plus, $50 Gift Card for $290 + Free Shipping!

Logitech Performance Mouse MX for as low as $80.10 + Free Shipping!

Char-Broil The Big Easy Oil-Less Infrared Turkey Fryer for $140 + Free Shipping!

Logitech MX 1100 Cordless Laser Mouse for as low as $40 + Free Shipping!

Western Digital 2 TB Caviar Green SATA Hard Drive for $190 + Free Shipping!

Buy an LG Blu-ray Player, Get 3 Blu-ray Movies for Free!

Logitech Harmony 890 Universal Remote Control for $100 + Free Shipping!!

Seagate FreeAgent Go 250 GB Portable External Hard Drive for $60 + Free Shipping!

Up to 50% off TomTom GO 720 Portable GPS Navigator + Free Shipping!

Logitech Harmony 880 Advanced Universal Remote Control for $124 + Free Shipping!

Up to $100 Gift Card with Select ASUS Thin and Light Laptops

TomTom GO 730 Portable GPS Navigator for as low as $120 + Free Shipping!

Western Digital 1.5 TB Caviar Green SATA Desktop Hard Drive for $109 + Free Shipping!

Save up to 39% and get free shipping on Harmony 1100 Advanced Touch Screen Universal Remote Control

61 queries / 1.336 seconds.