You are here: hacking technology > crack analyzes > Content
Hot Articles
Recommend Articles
New Articles
The third party browser warned safely
  Add date: 07/30/2008   Publishing date: 07/30/2008   Hits: 4
Crack warning: Through to the Microsoft browser IE6 cross territory crack's deep research, we discovered even if in fact in has installed in the IE7 browser's operating system, also same existence similar question. This crack exists not alone in IE6, but has in the browser connection which provides in Microsoft. Provides in Microsoft in the browser essence connection exists not yet the security problem which patches, causes to possess the third party browser which foundation develops in IE in the essence Trident to have a security crack, possibly causes the cross territory some operations, even may cause the long-distance code execution in the specific browser platform. We suggested that has the high secure request user to use browsers temporarily and so on oprea, Firefox, avoids some third party browser bringing the loss to you.

Crack explanation: In discusses after some technical personnel may see that IE7 has not done brand-new in the essence level too changes, what are more was the mile Trident essence periphery has made some modification in IE7 itself, this caused some IE7 very good security feature and the patching security crack has not inherited for these uses the IE essence the browser, because they used essentially system's IE essence, but was not has made modification IE7 in the periphery.
The common browser structure is the browser outer covering + browser essence, rident is in core analysis engine which IE uses, is responsible to process page's exaggeration and the javascript execution. The old IE essence is Trident the threat which brings regarding the third party browser is big in several aspects, because these threats are public may use for to attack:

First is the territory limit is not very strict, is very possible in the internet territory to be possible to obtain the local jurisdiction. For example:

<script src=” c:\x.js” >

In IE7 and in the third party browser coexisting environment, the above code is forbids completely in IE7, but may still be possible to use in the third party browser.

Second is some in IE7 false agreement like javascript which forbids, may use equally in the third party browser

<img src=” javascript:alert()” >

Third was certainly ie6 cross territory 0day which that everybody knew, but under the deep research might discover, not only this and in the ie6 existence, but deeper level reflection in IE essence connection, therefore brought the very tremendous influence, almost completely received on windows based on the IE third party browser affects.

We even may have the reason to guess that some question which repairs in IE can in other browsers reappear, for example lake2 discovery

http://www.qq.com@www.80sec.com

The URL fishing deceit question, was already ceased in the IE itself mile, but all may reappear in the third party browser.

Crack solution: Waits for the official patch

Prev:The careful character repertoire causes the browser software cross station script attack Next:360 security browser local xss cross territory crack

Comment:

Category: Home > crack analyzes