Find tech advice for business here
- Servers
- Desktops
- Laptops
- Tablet PCs
- PDAs
- Smart phones
- Digital cameras
- Camcorders
- Printers & multifunction devices
- Scanners
- Copiers
- Monitors & projectors
- Hard drives & burners
- Peripherals
- Productivity
- Accounting & finance
- Data management
- Graphics & publishing
- Web publishing
- Operating systems
- Security & utilities
- Downloads & trial software
- Handheld software
- Instant messaging
- Cell phones & plans
- Voice over Internet
- Telephones
- Routers & gateways
- Wireless networking
- Network adapters
- Internet access
- Web hosting
- Domain search
- Hotspot Zone
- Desktops
- Laptops
- Servers and storage
- PDAs
- Cell phones
- Monitors & projectors
- Printers
- Networking and wireless
- Security and utility software
- Productivity software
- Access, hosting, and services
- All business buying guides
Rob Vamosi's
award-winning
column on Internet threats and how to counter them
Delivered Mondays
CNET Security Center: Your complete source of antivirus and Internet security information.
Internet Explorer onUnload flaw CVE-2007-1091
A serious flaw in IE causes a denial of service attack (crash) or could allow remote access.
By Robert Vamosi (March 12, 2007)
This flaw prevents users from leaving a site, and allows remote attackers to spoof the address bar, conduct phishing, and other attacks on vulnerabile systems. The flaw is within the onUnload Javascript handlers.
A serious flaw in IE causes a denial of service attack (crash) or could allow remote access.
By Robert Vamosi (March 12, 2007)
QUICK FACTS
Name: Internet Explorer onUnload flaw CVE-2007-1091
Date first reported: 02/27/07
Vulnerable software: Internet Explorer, Version 7 and earlier
What it does: Causes a denial-of-service (crash) and can allow remote access.
Recommendations: None
Exploit code available: No
Vendor patch available: No
Date first reported: 02/27/07
Vulnerable software: Internet Explorer, Version 7 and earlier
What it does: Causes a denial-of-service (crash) and can allow remote access.
Recommendations: None
Exploit code available: No
Vendor patch available: No
Additional Resources:
US-CERT: CVE-2007-1091
Frsirt: 0713
Secunia: 2304
Full Disclosure: 52630
