Security Alert -- another bug in IE

[Mark Jurik <mark@xxxxxxxxxxxx>]

This affects MS IE 5.01, 5.5 and 6.0

Due to a bug in VBSCRIPT, you might think that when web site X automatically creates a new browser screen (a "frame") for you to surf web site Y, that you can send confidential data to Y without it being intercepted by X.  Although that is the way it is supposed to be, a security bug in VBSCRIPT currently permits a webmaster at X to craft code to capture all the information you are sending to Y through the frame. This flaw could also allow hackers to read files on your  computer. 

For a patch, go to ...

http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.asp


- mark jurik