Flaws in Firefox and IE7 could give hackers hard drive access

Fixes already in the pipeline


19 February 2007 11:06 GMT / By Amber Maitland

A security researcher has discovered two fairly serious flaws in Microsoft's Internet Explorer browser and Mozilla's Firefox.

Michal Zalewski, who posts to a security mailing list, says that the browsers' flaws could allow hackers to get data by luring users to malicious websites.

Microsoft has already confirmed that the flaw is present, and does allow a hacker to grab files off a PC's hard drive, but only if their locations are known.

The company is taking "appropriate action".

Firefox is afflicted by a similar flaw, as well as a second one that Zalewski calls "severe" and could allow hackers to alter cookies stored on a PC.

This means that a hacker could tamper with the way some sites are displayed and how they work.

However, Firefox has already come up with a fix to the problem, although it's not bee released yet; it will likely be part of Mozilla's next update.

Related
Full tags
Software, Online, Viruses And Malware, Microsoft, Mozilla

share print story pdf email story

Recommended articles


Search

Loading

Follow


Best iPad 2 apps

We detail the best iPad 2 and iPad apps in the app store Which iPad app should you download?

Windows 8

All the features and details of the new Microsoft operating system explained What's new in Windows 8?

iPad 3 rumours

What comes next? We look at the possible features, leaks, images, specs and more

Pocket-lint poll

Q. Will you be buying a PS Vita?

Vote YES Vote NO

» LAST TIME
When asked Will Samsung be making a mistake if the Galaxy S III isn't shown at Mobile World Congress in February? 51% said yes and 49% said no