[Deep Fury]

Kes inglise keelt hästi ei mõista, siis allpool seletatkse, et internet exploreri aitab pahalastel sinu arvuti suvalistele failidele ligi pääseda.

A vulnerability in the showHelp Method contained within IE may allow a remote attacker to read arbitrary files. For further details, please see the following documents: Sandblad #11: showHelp("file:") disables security in IE Microsoft Security Bulletin MS03-004 It is important to note that the patch *disables* the showHelp method, but does not "fix" it. In order to restore the functionality showHelp provides, you must install the latest version of HTML Help. Additionally, the latest version of HTML Help contains some limitations. Quoting from Microsoft Security Bulletin MS03-004: Only supported protocols can be used with showHelp to open a web page or help (chm) file. The shortcut function supported by HTML Help will be disabled when the help file is opened with showHelp This change will not affect the shortcut function if the user opens the same CHM file manually by double-clicking on it, or by invoking an application on the local system that uses the HTMLHELP( ) API. Microsoft recommends using http://windowsupdate.microsoft.com/ to obtain the latest version of HTML Help.

http://www.kb.cert.org/vuls/id/400577

[Karzum]

Ma ei mõista miks peab üksikuid turvaauke siia kopeerima ? - kes on sellest huvitatud vaatab ise microsofti leheküljelt. USA eriteenistuste käsul on windowsis alati mõned turvaaugud, et tagada USA rahvusliku julgeolekut. Kui ühed leitakse üles ning parandatakse, siis uued turvaaugud tulevad nende samade parandustega kaasa. Mingit garantiid, et selle IE turvaaugu parandamisega muutub arvuti turvaliseks ei ole. Vahe on ainult selles kui teadlikud erinevatest turvaaukudest ollakse - mida vähem ühest turvaaugust teatakse seda ohtlikum see on.