[ news_security_news ]
IE Can’t Handle Content-Disposition HTML
SecurityProNews
Staff Writer
2006-04-11
 Insider Reports RSS Feed
A flaw in Internet Explorer was made public yesterday by security architect Darren Bounds. The flaw is in how IE handles downloading files with Content-Disposition.
The weakness is due to IE's flawed support of RFC 2183 that causes the browser to mishandle HTML files, opening them inline and "exposing the application of scope."
"As such, it is strongly advisable that web-based software vendors use alternative methods to mitigate this class of attack," writes Bounds.
Bounds went on to opine that the simplicity of the exploit increases the likelihood of being used in the wild.
View All Articles by SecurityProNews
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
