Results 1 to 2 of 2

Thread: And yet another one.

  1. #1
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867

    Exclamation And yet another one.

    Here's is the latest from Microsoft.

    The Windows Script Engine provides Windows operating systems with
    the ability to execute script code. Script code can be used to add
    functionality to web pages, or to automate tasks within the
    operating system or within a program. Script code can be written in
    several different scripting languages, such as Visual Basic Script,
    or JScript.

    A flaw exists in the way by which the Windows Script Engine for
    JScript processes information. An attacker could exploit the
    vulnerability by constructing a web page that, when visited by the
    user, would execute code of the attacker's choice with the user's
    privileges. The web page could be hosted on a web site, or sent
    directly to the user in email.
    More Info at:
    http://www.microsoft.com/technet/sec...n/MS03-008.asp
    and
    http://www.microsoft.com/security/se...s/ms03-008.asp

    Gentlemen...patch those engines.

    Cheers:
    DjM

  2. #2
    Junior Member
    Join Date
    Mar 2003
    Posts
    29
    Typical. Cue MS supporters and linux lovers :

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •