News
Contributed by: Lauren Gerber
Date: July 30, 2009
Do you think that if computer software was perfect there would be no vulnerabilities? Even if every software application and program that existed was said to be over a hundred percent perfect, somebody somewhere out there would find a flaw and exploit it. If they were unable to find a flaw and exploit it, I am sure they would be able to create one and then exploit that. At the end of the day no matter how perfect any piece of software is, there will be a vulnerability somewhere. Sometimes there is even more than one vulnerability that causes chaos. In fact a few vulnerabilities were reported in Microsoft Internet Explorer. The main operating systems that these vulnerabilities affect are Windows 2000, Windows 2003, Windows 2008, Windows Vista as well as Windows XP.These vulnerabilities could become a main target for attackers, resulting in disastrous consequences due to the factor that Internet Explorer is very popular and is used by many people all across the world. The files of Internet Explorer 6 include the following: I_api.dll, BCTVALUE.BAT, COM192.COM as well as A2P.EXE. The impact of these vulnerabilities include the execution of arbitrary code, the elevation of privileges as well as a few memory corruption errors. All these vulnerabilities run the risk of being exploited by online attackers. One of these vulnerabilities relate to a manipulated HTMP page which may be used in order to carry out certain operations which may result in memory corruption. Another vulnerability occurs when a remote user creates a tampered with HTML, and when it is loaded by the target user, it executes arbitrary code on the chosen system. The code will unfortunately run with the privileges of the user. When this happens the remote attacker is then able to take as much control of this system as he desires and is able to perform many malicious activities. The one question which may be asked right now is, if so many vulnerabilities exist within Microsoft Internet Explorer, is there actually a solution to these problems? The good news is that there is a solution provided by the vendor, which will enable users to update to the latest version and in doing so, correct the previous problems. I would thus like to leave everyone with a quote in conclusion:"Are hackers a threat? The degree of threat presented by any conduct, whether legal or illegal, depends on the actions and intent of the individual and the harm they cause._Kevin Mitnick |
|||||
Software Downloads




User Comments