Comments on: Browser bugs hit IE

Security experts warn of two flaws in IE. One issue was initially thought to affect Firefox, but further research shows not.

[n3td3v]

More info

"Hackers" are now coding their own mini browsers which are installed onto operating systems, and could be launched with this vulnerability.

Why are people assuming, its a known browser thats going to be launched via the reported vulnerability.

Malware browsers are the new in thing for hackers, where they can customize the attack for the hacker's needs.

Of course, once these dedicated attack browsers are coded by "hackers" are used in attacks, they can get into the hands of the "script kid", where attacks of the nature i'm describing can become more wide spread and common place.

Right now dedicated browsers aren't being exploited in "script kid" attacks, basically as they don't have the programming knowledge.

Though there are dedicated malware browsers out there, distributed via "hacker" attacks, where it is the hacker's mini browser that opens via the attack, than commercial web browsers.

Keep your scope open here, and be prepared for more malware browsers being used in attacks.

This vulnerability reported in this article is a perfect environment for such a malware browser to be executed via this Internet Explorer / Firefox flaw.

[Des Alba]

I use Opera for most browsing

Like many others, I also keep IE6, FireFox and Netscape on my PC, but I find myself using Opera for most of my browsing. So far, so good. No bugs.

[n3td3v]

Don't be so sure

You're living a life in a false sense of security there.

No software is bug free.

If hackers dedicated enough time to Opera, it would have as many bugs in its browser, thats almost guaranteed.

[hansschmucker]

@c|net Advisory updated, Firefox not affected.

The SANS Advisory has been updated ( http://isc.sans.org/diary.php?storyid=1448 ) and now says that Firefox isn't affected at all, since it lacks the OuterHTML property.

[pentium4forever]

Opera & Firefox -- cure to IE problems

That's why you use Firefox and you don't have to worry about new bugs every hour. I know Microsoft's IE is targeted and they do everything they can but they don't take action quick enough. Firefox does it very quick and I don't know about Opera--as not as many people use it as FF but probably faster than IE bugs are fixed.