MeraWindows Forums - Get your Computer Problems Fixed

This is a site run by the community - for the community. At the site, we share and contribute our computer learnings with each other. We discuss about Windows, Office, Mobile, Gaming and other computer related topics. At our forums you can post your queries and our very helpful community members will respond quickly to your queries. We organize lots of competitions from time to time and award prizes to the winners.
You will need to register at the site before posting in forums. It's absolutely free. After registering, you can get all the benefits available to our registered members, you can access our Downloads section, you can participate in contests, etc. You can post in forums in English as well as in Hindi, in fact we encourage you to use Hindi in your posts. If you have any problem with registration or login, please contact us.

Search Home All Forums

Home

Windows Applica...

Internet Explor...

New IE Flaw – Turn Protected Mode On To Stay Safe

2/6/2010 8:34 PM

Ritesh Kawadkar

beingpc.com/
Joined: 7/2/2008

Posts: 1044

New IE Flaw – Turn Protected Mode On To Stay Safe

Posted Image

Microsoft warned yesterday that that a flaw in its Internet Explorer browser gives attackers access to files stored on a PC if the attackers know the name of the file they want to access.

“Our investigation so far has shown that if a user is using a version of Internet Explorer that is not running in Protected Mode an attacker may be able to access files with an already known filename and location. These versions includeInternet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service 4; Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4; and Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 on supported editions of Windows XP Service Pack 2, Windows XP Service Pack 3, and Windows Server 2003 Service Pack 2.”- Microsoft Security Advisory

Protected Mode prevents exploitation of this vulnerability and is running by default for versions of Internet Explorer on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008.”

The vulnerability exists due to content being forced to render incorrectly from local files in such a way that information can be exposed to malicious websites.