ok ok call me stupid if you have seen this somewhere else or its been reported earlier (not that I remember, but hey!) The point is, if its been reported earlier why is it still an issue?
Thanks to Jelte (I think :S LOL) for sending me a link that appears to be able to manipulate the command shell in Windows 2000, XP and possibly Windows Me granted I don't know anyone that uses Me so lets concentrate on the NT platforms. This link when opened will start your command shell (I tested it and its not malicious) on Win2k/XP in IE5/6 (I have the latest version installed with all the patches). When looking at the source it appears to be quite simple yet effective for the people who could misuse it. It simply calls via javascripting the command prompt. Others could let it do a whole lot more.
I decided to submit an error report and bug email to Microsoft. I do not expect to hear anything from them but if I do I will post the response here. come on Microsoft close off that browser! It may kick Netscapes ass, but its no good to anyone with gaping holes in it. If anyone can shed more light on this "feature" please feel free to comment, maybe you could tell me why privacy settings in IE6 do not include privacy to the command shell and file system at default!
View: The security breech demo.. (opens command shell)
View: Report the security issue here @ Microsoft
Thanks to Jelte (I think :S LOL) for sending me a link that appears to be able to manipulate the command shell in Windows 2000, XP and possibly Windows Me granted I don't know anyone that uses Me so lets concentrate on the NT platforms. This link when opened will start your command shell (I tested it and its not malicious) on Win2k/XP in IE5/6 (I have the latest version installed with all the patches). When looking at the source it appears to be quite simple yet effective for the people who could misuse it. It simply calls via javascripting the command prompt. Others could let it do a whole lot more.
I decided to submit an error report and bug email to Microsoft. I do not expect to hear anything from them but if I do I will post the response here. come on Microsoft close off that browser! It may kick Netscapes ass, but its no good to anyone with gaping holes in it. If anyone can shed more light on this "feature" please feel free to comment, maybe you could tell me why privacy settings in IE6 do not include privacy to the command shell and file system at default!
View: The security breech demo.. (opens command shell) View: Report the security issue here @ Microsoft
The TX99 will feature MIPS-3D ASE (application specific extension) for execution of multimedia tasks, enabling the chip to run at speeds over 1-GHz, said Toshinori Moriyasu, general manager of Microprocessor Division at Toshiba.
Development tools and applications software will be available from numerous third-party suppliers, including Algorithmics, Green Hills Software, Mentor Graphics, Microsoft, MontaVista, Red Hat and Wind River. In addition, the MIPS Alliance Program (MAP) supports the availability of critical hardware and software such as 802.11, Bluetooth, MPEG-2, MPEG-4, audio algorithms, ATM, and others.
Toshiba will launch its initial product in the first quarter of 2003 and bring a TX99-based general microprocessor to market by the end of 2003.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.