Internet Explorer Turns Your PC Into A Public File Server

by Klaus @ TechPatio on January 30, 2010

in Browsers, Security, Tech News

In the beginning of February, the Black Hat Technical Security Conference is held in the US, where Jorge Luis Alvarez Medina will be speaking on a topic that might interest you, it will certainly interest Microsoft. The topic is “Internet Explorer turns your personal computer into a public file server”.

In this presentation we will show how an attacker can read every file of your filesystem if you are using Internet Explorer. This attack leverages different design features of Internet Explorer entailing security risks that, while low if considered isolated, lead to interesting attack vectors when combined altogether. We will also disclose and demonstrate proof of concept code developed for the scenarios proposed.

Microsoft might get busy next week, patching up their browser to withstand this new series of exploits that could turn your computer into a public file server. Let’s hope they have it ready for the next scheduled Microsoft patch day, Tuesday February 9th.

Are you still using Internet Explorer? If yes, what’s keeping you from switching to Firefox or another browser? Leave a comment, below.

Related Articles:


{ 2 trackbacks }

Myung-Ju Kang
February 2, 2010 at 08:49
Stephen Basile
February 4, 2010 at 05:03

{ 5 comments… read them below or add one }

Michael Aulia January 31, 2010 at 07:54

I think most people who are still using Internet Explorer are those non-tech savvy users. Since it comes preinstalled with their computer (Windows), they are sticking with it
Michael Aulia´s last blog ..WD TV Live Review

Reply

Tom January 31, 2010 at 08:07

I made the move to firefox a couple of years ago. I really hope that Windows do all they can to fix these holes.

Reply

Jake January 31, 2010 at 10:35

It’s pretty bad when governmental institutions discourage the use of explorer, like the German Federal Office for Security in Information Technology (BSI) recommends using other browsers until the vulnerability exploited in the Google China case and other technology companies intrusions. The German report indicates versions 6, 7 to 8 are all vulnerable and advises disabling scripting Acitve and running in protected mode lower vulnerability.

Anyone doing web development needs to use Firebox to benefit from the rich variety of plug-in utilities.

Reply

Serge February 2, 2010 at 10:10

Me personally i like FireFox browser a lot better than Internet Explorer. It looks better and with all the short cuts it a lot easier to use. The only people that still use Internet Explorer is because it came with windows and they just don’t know better.

Reply

Somone February 2, 2010 at 11:00

Maybe ths is why many European countries have advised people to stop using IE. I’ll be happy when IE goes away and all of our Thesis Theme modifications work beautifully in most people’s browsers.
Somone´s last blog ..6 More Examples of Unique Thesis Theme Sites

Reply

Leave a Comment

This blog is 'dofollow'. Do not spam, advertise or use keywords as your name.
If your comment does not show instantly, then it was caught by the spam filter. In that case, you are stronlgy advised to write a new comment to let us know your previous one didn't show up.
dofollow certified blog

CommentLuv Enabled

Get smart with the Thesis WordPress Theme from DIYThemes

Previous post:

Next post: