IDN Forums - Internationalized Domain Names  
Home | idntools | Advertise on idnforums | Premium Membership

Go Back   IDN Forums - Internationalized Domain Names > IDN Development > Browser, Mobile & Software

Browser, Mobile & Software Discussion of IDNs & browsers such as Microsoft IE, mobile cell phones, or other software

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 11th May 2006, 11:13 PM
sarcle's Avatar
Senior Member
 
Join Date: Oct 2005
Location: Planet Earth
Posts: 3,717
iTrader: (22)
Rep Power: 1714
sarcle will become famous soon enoughsarcle will become famous soon enoughsarcle will become famous soon enoughsarcle will become famous soon enoughsarcle will become famous soon enoughsarcle will become famous soon enoughsarcle will become famous soon enough
i-NAV Plug-in Flaw

Quote:
Code Execution Bug in Verisign i-NAV Plug-in
A "highly critical" flaw the Verisign's i-Nav ActiveX control could put users at risk of system access attacks, according to a warning from Tipping Point's Zero Day Initiative.


The vulnerability, which has been fixed by Verisign, allows remote attackers to execute arbitrary code on vulnerable installations of the Verisign i-Nav ActiveX control. "User interaction is required to exploit this vulnerability in that the target must visit a malicious Web page," according to the alert.
The specific flaw exists within the "VUpdater.Install" ActiveX control which is used to provide native support for IDNs (Internationalized Domain Names) in Microsoft's Internet Explorer, Outlook and Outlook Express products.
"Due to the lack of verification on Microsoft Cabinet (.CAB) files from the "InstallProduct" routine, an attacker can specify an arbitrary executable to run under the context of the current user," the company said.
I guess no one has told them about internet explorer 7?
http://www.publish.com/article2/0,1895,1961002,00.asp
__________________
I can hear the death rattle of fiat from here...
Reply With Quote
  #2 (permalink)  
Old 11th May 2006, 11:36 PM
Rubber Duck's Avatar
Veteran
 
Join Date: Sep 2005
Location: Czech Republic (For those of you from USA = Chechnya)
Posts: 15,929
iTrader: (59)
Rep Power: 4495
Rubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura aboutRubber Duck has a spectacular aura about
Re: i-NAV Plug-in Flaw

Will IE 7.0 be affected? If not then this is of little consequence.
__________________
All offers to sell are void.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 06:27 AM.

Site Sponsors
Your ad here
buy idns
domain name lawyer
buy t-shirt
מחיר הזהב

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.3.0
Copyright idnforums.com 2005

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54