Browser Security News

This morning we re-released three versions of our August 2006 cumulative security update (MS06-042). As I had written about before, the original release of MS06-042 introduced a new security vulnerability for IE 6.0 SP1 users which we addressed in a subsequent re-release. However, with the increased scrutiny this release received, a security researcher responsibly disclosed […]

A small hacker has little to pray for these days, as MySpace and unpatched Internet
Explorer are enough to get him all the access he wants. An advertisement for deckoutyourdeck.com, found in so many MySpace sites and profiles, exploits a well-known vulnerability in Internet Explorer’s handling of WMF files. Which means that you needn’t click […]

After all, the technigentsia have long proclaimed that mentioning "IE" and "security" in the same breath is akin to oxymorons like "jumbo shrimp," "friendly fire," and "priceless junk."
But nearly 80 percent of the world’s surfers use IE. They can’t all be dim.
They’re not, and neither is Microsoft, which after five years of resting on the […]

Security analysts Wednesday warned users of a pair of unpatched bugs in Microsoft’s popular Internet Explorer browser that may soon be in play because proof-of-concept code has gone public for both.
The two vulnerabilities have been detailed on the Full Disclosure security mailing list, and were the root of alerts issued by the SANS Institute’s Internet […]

A California company better known for "sandbox" style security aimed at enterprises on Tuesday launched consumer software that puts Internet Explorer in a protected virtual machine. The approach blocks some malware from reaching the operating system and lets users "wipe" the browser slate clean to return IE to a pristine state.
GreenBorder Technologies’ same-named GreenBorder Pro […]

Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in arbitrary code execution. The affected objects are not intended to […]