Finally stopped using Internet Explorer?Young Kinky Sex (2008) Watch online full movie Good! But, now it’s time to completely delete it from your computer, too.
Security researcher John Page has discovereda new security flawthat allows hackers to steal Windows users’ data thanks to Internet Explorer. The craziest part: Windows users don’t ever even have to open the now-obsolete web browser for malicious actors to use the exploit. It just needs to exist on their computer.
“Internet Explorer is vulnerable to XML External Entity attack if a user opens a specially crafted .MHT file locally,” writesPage. “This can allow remote attackers to potentially exfiltrate Local files and conduct remote reconnaissance on locally installed Program version information.”
Basically, what this means is that hackers are taking advantage of a vulnerability using .MHT files, which is the file format used by Internet Explorer for its web archives. Current web browsers do not use the .MHT format, so when a PC user attempts to access this file Windows opens IE by default.
To initiate the exploit, a user simply needs to open an attachment received by email, messenger, or other file transfer service.
“[For] example, a request for "c:\Python27\NEWS.txt" can return version information for that program,” Page explains. “Upon opening the malicious '.MHT' file locally it should launch Internet Explorer. Afterwards, user interactions like duplicate tab 'Ctrl+K' and other interactions like right click 'Print Preview' or 'Print' commands on the web-page may also trigger the XXE vulnerability.”
The exploit has been tested using the last version of Internet Explorer, IE 11. It affects Windows 7, Windows 10, and Windows Server 2012 R2 users.
Most worrisome, according to Page, is that Microsoft told him that it would just “consider” a fix in a future update. The security researcher says he contacted Microsoft in March before now going public with the issue.
As ZDNetpoints out, while Internet Explorer usage makes upless than 10 percent of the web browser market, it doesn’t particularly matter in this case as the exploit just requires a user to have the browser on their PC.
Earlier in 2019, Microsoft cybersecurity expert Chris Jackson urged anyone still using Internet Explorer to finally give it up. The company officially discontinued its former flagship web browser in 2015.
Topics Cybersecurity Microsoft Windows
(Editor: {typename type="name"/})
Apple is actively looking at AI search for Safari
The ending of 'Dune' explained, and what to expect from Part Two
Gift cards suck, just give cash
NYT Connections Sports Edition hints and answers for May 18: Tips to solve Connections #237
Lindsay Lohan has a bizarre new gig with Lawyer.com
How to enter low power mode automatically on iPhone
Grown man Ben Carson blames his wife for the $31,000 dining room set
Inside the Murky Process of Getting Games on Steam
HBO Max’s ‘Love Life’ justifies its existence in Season 2
接受PR>=1、BR>=1,流量相当,内容相关类链接。