In less than 24 hours a IE7 hole is found!

 Hard to believe. This is a persistent lot.

Secunia Advisory:
SA22477

Release Date:
2006-10-19

Critical:

Less critical

Impact:
Exposure of sensitive information

Where:
From remote

Solution Status:
Unpatched

Software:
Microsoft Internet Explorer 7.x

This advisory is currently marked as unpatched!
Companies can be alerted when a patch is released!

Description:
A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.
The vulnerability is caused due to an error in the handling of redirections for URLs with the “mhtml:” URI handler. This can be exploited to access documents served from another web site.
Secunia has constructed a test, which is available at:
http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/
Secunia has confirmed the vulnerability on a fully patched system with Internet Explorer 7.0 and Microsoft Windows XP SP2. Other versions may also be affected.

Source: Internet Explorer 7 “mhtml:” Redirection Information Disclosure – Advisories – Secunia

Advertisements

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s