microShafted?

--Phel Trojan Exploits Known IE 6.0 Hole

(30/29 December 2004)

The Phel Trojan horse program exploits the "Microsoft Internet Explorer HTML Help Control Local Zone Security Restriction Bypass" vulnerability in Internet Explorer 6.0; this vulnerability is in the way Internet Explorer handles help files called from web pages. The flaw affects Windows XP, even with Service Pack 2 installed. Maliciously constructed web pages infect vulnerable machines with the Trojan horse program which allows attackers remote access to the infected computer.

zdNet

computorWorld

theRegister

[sourceEditor's Note (Grefer):

"Given the regularity with which IE vulnerabilities are exposed, and also considering its tight integration with the Windows operating systems, users might want to consider switching to alternate browsers, such as Mozilla/Firefox or Opera, for regular activities."]



dashBoard