Leaked Windows Code Opens IE Hole

Dyre Straits · Feb 18, 2004, 02:45 AM

A bug hunter claims to have uncovered a security flaw in Microsoft's Internet Explorer 5 Web browser by studying Windows source code that was leaked last week.

The vulnerability allows an attacker gain control over a user's computer by using a specially crafted bitmap file. When loaded using IE 5, the file will trigger an overflow error and allow the attacker to run arbitrary code on a victim's machine, according to a description of the flaw posted Sunday on the SecurityTracker.com Web site.

The flaw was uncovered by reviewing IE source code that was part of a larger Windows code leak last week and exists in all versions of IE 5 for all Windows versions, according to the description.

Joris Evers, IDG News Service

Article Here

Source: PC World

TwistedMetal · Feb 18, 2004, 04:12 AM

Well, if I had Windows 95 then I might worry.

Since I have Windows XP Pro and Firefox. Bring on the IE flaws!

The_Neon_Cowboy · Feb 18, 2004, 07:24 AM

and does he know that leak is illeagal to have so he's just confessed to a fellony? even just haveing the code

***Zardon*** · Feb 18, 2004, 09:33 AM

some more information on this here

***Zardon*** · Feb 18, 2004, 09:34 AM

and some denials from microsoft here

Feb 18, 2004, 02:45 AM	#1
Dyre Straits DriverHeaven Granddaddy Join Date: May 2002 Location: Georgia, USA Posts: 12,403 Rep Power: 78 System Specs	Leaked Windows Code Opens IE Hole A bug hunter claims to have uncovered a security flaw in Microsoft's Internet Explorer 5 Web browser by studying Windows source code that was leaked last week. The vulnerability allows an attacker gain control over a user's computer by using a specially crafted bitmap file. When loaded using IE 5, the file will trigger an overflow error and allow the attacker to run arbitrary code on a victim's machine, according to a description of the flaw posted Sunday on the SecurityTracker.com Web site. The flaw was uncovered by reviewing IE source code that was part of a larger Windows code leak last week and exists in all versions of IE 5 for all Windows versions, according to the description. Joris Evers, IDG News Service Article Here Source: PC World

Feb 18, 2004, 04:12 AM	#2
TwistedMetal MC John-117 Join Date: Jul 2003 Location: Phoenix, Arizona Posts: 729 Rep Power: 0	Well, if I had Windows 95 then I might worry. Since I have Windows XP Pro and Firefox. Bring on the IE flaws! __________________ [color=red][/color]

Feb 18, 2004, 07:24 AM	#3
The_Neon_Cowboy DriverHeaven Extreme Member Join Date: Dec 2002 Location: U.S.A. Posts: 16,135 Rep Power: 77 System Specs	and does he know that leak is illeagal to have so he's just confessed to a fellony? even just haveing the code __________________

Feb 18, 2004, 09:33 AM	#4
*Zardon* enchanted Join Date: May 2002 Location: Driverheaven Posts: 32,259 Rep Power: 3150	some more information on this here

Feb 18, 2004, 09:34 AM	#5
*Zardon* enchanted Join Date: May 2002 Location: Driverheaven Posts: 32,259 Rep Power: 3150	and some denials from microsoft here