Internet Explorer Cookie Data May Be Exposed or Altered New

A security vulnerability exists in Internet Explorer versions 5.5 and 6 that may allow a malicious user to create an URL that allows a Web site to gain unauthorized access to cookies that are stored on a computer and then potentially modify the values that are contained within them.

Issue

Maliciously exploiting this vulnerability would require that a user choose to click an URL link on a page that an attacker has hosted on his or her site, or to click an URL link that is embedded in an HTML e-mail message that the attacker has sent. It cannot be automatically invoked without user interaction.

Affected Products

• Microsoft Internet Explorer 5.5 and 6.0

Download

Patch: http://www.microsoft.com/windows/ie/downloads/critical/q312461/default.asp

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: November 13, 2001

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<