Finally stopped using Internet Explorer?Watch Fast & Furious 7 Online Good! But, now it’s time to completely delete it from your computer, too.
Security researcher John Page has discovereda new security flawthat allows hackers to steal Windows users’ data thanks to Internet Explorer. The craziest part: Windows users don’t ever even have to open the now-obsolete web browser for malicious actors to use the exploit. It just needs to exist on their computer.
“Internet Explorer is vulnerable to XML External Entity attack if a user opens a specially crafted .MHT file locally,” writesPage. “This can allow remote attackers to potentially exfiltrate Local files and conduct remote reconnaissance on locally installed Program version information.”
Basically, what this means is that hackers are taking advantage of a vulnerability using .MHT files, which is the file format used by Internet Explorer for its web archives. Current web browsers do not use the .MHT format, so when a PC user attempts to access this file Windows opens IE by default.
To initiate the exploit, a user simply needs to open an attachment received by email, messenger, or other file transfer service.
“[For] example, a request for "c:\Python27\NEWS.txt" can return version information for that program,” Page explains. “Upon opening the malicious '.MHT' file locally it should launch Internet Explorer. Afterwards, user interactions like duplicate tab 'Ctrl+K' and other interactions like right click 'Print Preview' or 'Print' commands on the web-page may also trigger the XXE vulnerability.”
The exploit has been tested using the last version of Internet Explorer, IE 11. It affects Windows 7, Windows 10, and Windows Server 2012 R2 users.
Most worrisome, according to Page, is that Microsoft told him that it would just “consider” a fix in a future update. The security researcher says he contacted Microsoft in March before now going public with the issue.
As ZDNetpoints out, while Internet Explorer usage makes upless than 10 percent of the web browser market, it doesn’t particularly matter in this case as the exploit just requires a user to have the browser on their PC.
Earlier in 2019, Microsoft cybersecurity expert Chris Jackson urged anyone still using Internet Explorer to finally give it up. The company officially discontinued its former flagship web browser in 2015.
Topics Cybersecurity Microsoft Windows
Previous：A worthless juicer and a Gipper-branded server
Next：Gods of War
Shop Owala's Memorial Day Sale for 30% off tumblers
9 incredible ways we're using drones for social good
Woman casually browsed social media on her phone while doctors operated on her
Please stop putting old ladders in your bathroom
The Baffler’s May Day Round Up
Everybody really wants to believe this story about Tom Hardy kicking ass
Russian refugees read powerful testimonials of gay men who escaped Chechnya
Why Prince Harry and Prince William are truly the millennial royals
New MIT report reveals energy costs of AI tools like ChatGPT
Trump won't fire Sean Spicer because 'that guy gets great ratings'
'The Last of Us' Season 2, episode 3's opening credits has a heartbreaking change
'Deadpool 2' just got upgraded to a summer date in the year of X
This iPhone 8 'dummy model' is a total throwback to the first iPhone
The force was strong with these 'Star Wars' Half Marathon runners
Best rope light deal: Save 25% on Lepro N1 AI Smart RGB LED Strip Lights
Russian refugees read powerful testimonials of gay men who escaped Chechnya
Global warming is sharply raising the risk of 'unprecedented' events
9 incredible ways we're using drones for social good
Best Bluetooth tracker deal: Save 29% on the Tile by Life360 Essentials bundle
Kendrick Lamar's mom is the emoji queen and we're not worthy
Blink Mini 2 deal: $19.99 at Amazon (save $20.99)Today's Hurdle hints and answers for April 12, 2025NYT mini crossword answers for April 12, 2025Best rope light deal: Save 25% on Lepro N1 AI Smart RGB LED Strip LightsWordle today: The answer and hints for April 12, 2025Best Google Pixel deal: Save $300 on the Google Pixel 9 ProBest LG TV deal: LG UT70 4K drops to $349 at Best BuyWordle today: The answer and hints for April 13, 2025How to unblock Xnxx for freeBest AI smart lamp deal: Save 46% on Lepro O1 AI Smart LED Floor LampBest LG TV deal: LG UT70 4K drops to $349 at Best BuyHow to file a tax extensionBlue Origin launch livestream: See Katy Perry, Gayle King and others head toward space'The Last of Us' Season 2, episode 1: Who is Abby?TikTok wants me to host a dinner party. Is that an actual recession indicator?NYT Connections hints and answers for April 12: Tips to solve 'Connections' #671.HAPPRUN Native projector: $49.99 at WootTech CEO promised AI but hired human workers, FBI claimsWordle today: The answer and hints for April 15, 2025Wordle today: The answer and hints for April 11, 2025 Starlink's Portability feature lets you take your internet with you 'The Staircase' review: Exploitative true crime at its best and worst UPS guy delivers the best selfies whenever he drops off a package These 5 changes could help Google's rumored Pixel Buds Pro leave AirPods in the dust Ultimate dad Barack Obama accidentally plays matchmaker at campaign event 'Wordle' today: Here's the answer, hints for May 10 You need to own a dog to live in this apartment complex in Denmark New federal program will make broadband cheaper for low Ambulance officers lauded for granting dying man's wish for a sundae Free Comic Book Day is here, so here's all the free comics you can grab 'Phoodle' is your next favorite 'Wordle' knock 'Serial' Season 3 is coming your way How to see an eerie total lunar eclipse in the sky this weekend Review: YSL's custom lipstick maker is impressive, but pricey Peacock's 'Girls5eva' Season 2 is bursting with bops and bits Steve Bannon is headlining the New Yorker Festival and readers are outraged Watch this good dog patiently hold a hot dog in its mouth while its owner takes a picture Colin Kaepernick's Nike ad is naturally a meme now — and even Don Jr. is getting in on it Watch in delighted agony as Jared Kushner waits for the big adults to come open the door Ncuti Gatwa announced as the new Doctor on 'Doctor Who'
2.6832s , 10129.671875 kb
Copyright © 2025 Powered by 【Watch Fast & Furious 7 Online】,Wisdom Convergence Information Network