DIGIT-ARC read-only archive · snapshot: July 23, 2026

IE 7 vulnerability LOL....

16 posts · originally from https://geek.digit.in/community/threads/ie-7-vulnerability-lol.39078/

pradipudhaya
pradipudhaya Original post #1
Oct 19, 2006 at 3:20 PM
A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site.

Source: *secunia.com/advisories/22477/

Take the vulnerability test here : *secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

And the result haha ... lol
Your browser is vulnerable! The test retrieved content from news.google.com in the context of your browser.

This actually means that if you were logged into your bank account, any web site you are visiting would be able to retrieve confidential data from your bank. This could also be used to retrieve personal settings entered on sites like eBay or Paypal.
[xubz]
[xubz] #2
Oct 19, 2006 at 3:22 PM
Hehehe.. And IE7 Final was Released Yesterday.. I Expect a Patch Soon :p
pradipudhaya
Oct 19, 2006 at 3:25 PM
subbzzz said:
Hehehe.. And IE7 Final was Released Yesterday.. I Expect a Patch Soon :p
IE6 had the same vulnerability.....*secunia.com/advisories/19738/
JGuru
JGuru #4
Oct 19, 2006 at 3:43 PM
More vulnerabilities in IE are going to be discovered!!! For Hackers this is a very busy
time!!! Also Vista is going to be released soon. So it's a great treat is in the offing for Hackers!!
aakash_mishra
Oct 19, 2006 at 4:31 PM
And more will be discovered soon.............
rajat22
rajat22 #6
Oct 19, 2006 at 4:59 PM
Result (The result of the test will be displayed below)


Your browser is vulnerable! The test retrieved content from news.google.com in the context of your browser.

This actually means that if you were logged into your bank account, any web site you are visiting would be able to retrieve confidential data from your bank. This could also be used to retrieve personal settings entered on sites like eBay or Paypal.
That was the result and I did not visit news.google.com at all in last 14 days.
Is the test authentic????
F
Oct 19, 2006 at 7:03 PM
hehehe...more soon..
chesss
chesss #8
Oct 19, 2006 at 7:41 PM
OMG! This is an absolute SHOCK!! lol
G
gxsaurav #9
Oct 19, 2006 at 8:30 PM
i wonder why didn't secunia told the IE 7 developers & beta team about this bug, if it was so old
Rollercoaster
Oct 19, 2006 at 9:08 PM
opera is not affected
hemant_mathur
Oct 19, 2006 at 9:31 PM
Just one of the many bugs to be found in the near future
anandk
anandk #12
Oct 19, 2006 at 9:42 PM
IE is still used by the majority. lets face it. hackers will WANT to CREATE vulnerabilities. this can-n-mouse game will continue. whats imp is how fast ms keeps reacting. thats the price u have to pay to remain at the top !!!
gary4gar
gary4gar #13
Oct 20, 2006 at 2:04 AM
its a cat-mouse game!
first discover a vulnerability & realse a patch for it which again hackers will break
J
jeetu #14
Oct 20, 2006 at 4:43 AM
Well IE7 is a poor attempt to match opera and firefox by microsoft. As usual its filled will holes and bugs like other MS products.
G
gxsaurav #15
Oct 20, 2006 at 11:54 AM
it's clearified by MS today, it's not a bug in IE 7 it's a bug in Outlook Express on Windows XP

*bink.nu/Article8571.bink

If secunia knew this bug from a long time, why didn't they told IE team during the beta phase, looks like they were just waiting for the right time, & now they are saying..."Look, we are the first one to report, we are better then all else". I mean, seriously, this is why beta phase is for, to submit bugs
sabret00the
Oct 21, 2006 at 12:47 AM
M$ at its best