Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Internet Explorer zero-day lets hackers steal files from Windows PCs
#1
Quote:Microsoft refused to patch issue so security researcher released exploit code online.

A security researcher has published today details and proof-of-concept code for an Internet Explorer zero-day that can allow hackers to steal files from Windows systems.

The vulnerability resides in the way Internet Explorer processes MHT files. MHT stands for MHTML Web Archive and is the default standard in which all IE browsers save web pages when a user hits the CTRL+S (Save web page) command.
 
Modern browsers don't save web pages in MHT format anymore, and use the standard HTML file format; however, many modern browsers still support processing the format.

Today, security researcher John Page published details about an XEE (XML External Entity) vulnerability in IE that can be exploited when a user opens an MHT file.

SOURCE: https://www.zdnet.com/article/internet-e...ndows-pcs/
[-] The following 3 users say Thank You to silversurfer for this post:
  • Deep900, dinosaur07, harlan4096
Reply
#2
Internet Explorer is an unsecure browser compared to the safe and modern alternatives like Chrome or Firefox. Firefox is working very well on security with the latest updates, using Internet Explorer is not a safe habit in my opinion. Also Chrome and others modern browsers can have vulnerabilities but usually they are fixed quite fastly.
[-] The following 1 user says Thank You to Deep900 for this post:
  • silversurfer
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username/Email:


Password:





[-]
Recent Posts
AWZ Screen Recorder
AWZ Screen Recorder ...zevish — 11:05
Website X5 Go 2024.1
Website X5 Go 2024.1...zevish — 09:32
Apple's rules to allow third-party app ...
Apple has announ...alison30 — 09:28
Intel: Microsoft AI PCs need a Copilot K...
Microsoft hopes th...harlan4096 — 08:55
Synchredible 8 Professional Edition v8.2...
          Synchredib...zevish — 08:54

[-]
Birthdays
Today's Birthdays
No birthdays today.
Upcoming Birthdays
No upcoming birthdays.

[-]
Online Staff
There are no staff members currently online.

>