Internet Explorer Flaws Allow Auto Adware Installation

Filed in: Microsoft, Security — June 11th, 2004

An adware purveyor has apparently used two previously unknown security flaws in Microsoft’s Internet Explorer browser to install a toolbar on victims’ computers that triggers pop-up ads, researchers said this week.

One flaw lets an attacker run a program on a victim’s machine, while the other enables malicious code to “cross zones,” or run with privileges higher than normal. Together, the two issues allow for the creation of a Web site that, when visited by victims, can upload and install programs to the victim’s computer, according to two analyses of the security holes.

Thought:
Another reason not to use IE? While there is no fix for the flaws yet, Microsoft has an instruction to teach you harden your browsing security.