Infocon to status yellow !

[plun]

Hi

IE again...........

http://isc.sans.org/diary.php?storyid=877

"Disable Javascript in your Internet Explorer browsers, or switch to
another browser"

 

[Bill Sanderson]

Here's how to do that:

Click the "View" menu.
Click "Internet Options..."
Click the "Security" tab.
Click the "Custom (for expert users)" button and then click the
"Settings..." button.
Scroll down to the "Active Scripting" section and click the "Disable"
button.
Click the "OK" button.
Click the "Apply" button.


(although I've tried the PoC code myself and it didn't work for me--but it
has for others....)

 

[Bill Sanderson]

PoC did work on my wifes machine, but crashed IE after launching Calc.

--

Here's how to do that:

Click the "View" menu.
Click "Internet Options..."
Click the "Security" tab.
Click the "Custom (for expert users)" button and then click the
"Settings..." button.
Scroll down to the "Active Scripting" section and click the "Disable"
button.
Click the "OK" button.
Click the "Apply" button.


(although I've tried the PoC code myself and it didn't work for me--but it
has for others....)



--

 

[Anonymous Bob]

Hi

IE again...........

http://isc.sans.org/diary.php?storyid=877

"Disable Javascript in your Internet Explorer browsers, or switch to
another browser"

Thank you, plun.

Bob Vanderveen

 

[Guest]

http://www.microsoft.com/technet/security/advisory/911302.mspx

Microsoft suggests that professionally obligated entities knew of this flaw
and failed to notify microsoft of the issue... "Microsoft is concerned that
this new report of a vulnerability in Internet Explorer was not disclosed
responsibly, potentially putting computer users at risk."

 

[Guest]

IE6 SP2 built-in pop-up blocker save me from vulnerable java message box

 

[Anonymous Bob]

http://www.microsoft.com/technet/security/advisory/911302.mspx

Microsoft suggests that professionally obligated entities knew of this flaw
and failed to notify microsoft of the issue... "Microsoft is concerned that
this new report of a vulnerability in Internet Explorer was not disclosed
responsibly, potentially putting computer users at risk."

One could look at it that way, I suppose, but they were notified of the
problem in May. At that time it was only seen as a denial of service
problem. The present exploit is a more creative elaboration on the same
security flaw.

Bob Vanderveen