Leaked source leads to new Vulnerabiilty...

Monday, February 16, 2004 10:55:00 AM

Microsoft Internet Explorer Integer Overflow in Processing Bitmap Files Lets Remote Users Execute Arbitrary Code

Quote:

The author states that this flaw was found by reviewing the recently leaked Microsoft Windows source code. The flaw reportedly resides in 'win2k/private/inet/mshtml/src/site/download/imgbmp.cxx'.

Hey MS, look at the bright side of things, you now have hundreds/thousands of people rummaging around in your source code making sure it is perfect. Thats quite the army of unpaid people ensuring your product is next to perfect. Maybe put on the box "Hacker Approved", once this is all said and done. ;)

2 Comments

Julien Ellie said Monday, February 16, 2004 12:09:00 PM

The interesting par is that the vulnerability is only affecting IE5. IE6 is not affected.
senkwe said Monday, February 16, 2004 1:48:00 PM

Wierd. Doesn't IE 5 run on like 20-30% of the worlds Windows systems? They should have still fixed this for IE 5 for those people that haven't upgraded to IE 6.

Comments have been disabled for this content.