Do not press the button marked "Do Not Press"
No, really, don't press it.
"The vulnerability exists in the way that VBScript interacts with Windows Help files when using Internet Explorer," read the advisory. "If a malicious Web site displayed a specially crafted dialog box and a user pressed the F1 key, arbitrary code could be executed in the security context of the currently logged-on user."
I'm not that down on Microsoft for this. XP is, after all, a ten-year old OS, so things like this will take longer to patch than for, say, Windows 7. But what makes Windows good, the interaction between the OS and Office, is what allows this to happen.
This entry was posted by Kevin Creighton, on
3.02.2010.
You can leave your response.
