Forum libero

Original URL: http://www.theregister.co.uk/2007/06/05/browser_vu...
--------------------------------------------
By Dan Goodin in San Francisco
Published Tuesday 5th June 2007 02:23 GMT
--------------------------------------------
Polish security researcher Michal Zalewski, known for his seemingly unending stream of browser vulnerability discoveries, has struck again. This time he's reported four flaws that are sure to get the attention of bug squashers in both Microsoft and Mozilla camps.

The most serious vulnerability could make it possible for cyber crooks to steal sign-on cookies from online banks and other trusted sites and possibly execute attack code on a victim's machine. Zalewski's findings, which included a total of four vulnerabilities - for good measure, two for IE and two for Firefox - were reported earlier today (http://lists.grok.org.uk/pipermail/full-disclosure... ) on the Full Disclosure mailing list.