LIUDIEYU English Blog　 Design Flaw in Windows Internet Explorer Allows Remote Code Execution From Safari for Windows

comment edit

Name
Subject
Mail
URL
Font & Icon
Comment: If you had read through the MS advisory, you might have saved yourself some work. It says under FAQs "A combination of the default download location in Safari and how the Windows desktop handles executables creates a blended threat in which files may be downloaded to a user’s machine without prompting, allowing them to be executed." And in the summary (above all the folders) it also says - "Mitigating Factors: Customers who have changed the default location where Safari downloads content to the local drive are not affected by this blended threat." And they also restate this in the Workarounds section (as you pointed out). It is a "blended" threat so by definition Safari is only part of the problem. From what I gather Safari downloads files WITHOUT prompting, which is not a secure default setting.
Pass
Secret: 管理者にだけメッセージを送る

home

Links

Add this blog to links

New Post

New Comment

New Trackback

Monthly Archive

Category

RSS Feed