PDA

View Full Version : Hotmail, Yahoo vulnerable to security flaw


bigc73542
March 26th, 2004, 09:49 PM
Link to story: http://www.infoworld.com/article/04/03/23/HNhotmailyahoo_1.html

-{ Quote: "Hotmail, Yahoo vulnerable to security flaw
Hole could let attackers run malicious code on PCs using IE to check Web-based email accounts
By Paul Roberts ***March 23, 2004 ***

BOSTON - An Israeli security company is warning users of Yahoo Inc.'s Web e-mail service and Microsoft Corp.'s Hotmail service of a serious security flaw that could allow remote attackers to run malicious computer scripts on computers using Microsoft's Internet Explorer Web browser to check Web e-mail accounts.

The vulnerability was discovered in an Internet Explorer (IE) feature used to process extensions to HTML (Hypertext Markup Language) called HTML + TIME. The security hole could allow attackers to steal login and password information, or browse the contents of an e-mail account, according to an advisory released by GreyMagic Software.

The company tested the vulnerability against Yahoo and Hotmail, but it could affect other e-mail services, GreyMagic said.

.
.
." }-