Security hole found in Explorer

Andy Engle (andy@edi.paimail.com)
Mon, 26 Aug 1996 15:06:18 -0400 (EDT)



Found in InfoWeek, August 26, 1996, page 3:

Scientists at Princeton University last week discovered a flaw in 
Microsoft's Internet Explorer 3.0 that lets hackers set up dummy Web 
sites to lure in unsuspecting users. Once users enter the site, the bug 
lets hackers run DOS commands on the users' systems. Microsoft officials 
said the problem was rectified within 24 hours by a downloadable software 
patch, and the company has received no reports of the bug from Explorer 
users. For those who don't download the patch, Word 6.0 has a macro virus 
protection feature that automatically guards against the bug.