Techno-News Blog Ray Schroeder, editor, OTEL - University of Illinois at Springfield

Link to Web Counter at www.digits.com

Bobby Approved (v 3.2)
Saturday, February 09, 2002

http://www.infoworld.com/articles/hn/xml/02/02/08/020208hnflaw.xml

Microsoft Messenger flaw can disclose user data
By Sam Costello

MICROSOFT CONFIRMED FRIDAY that its instant messaging programs MSN Messenger and the Windows Messenger included with the company's Windows XP operating system can allow users' names and e-mail addresses, as well as those of all their chat buddies, to be viewed. The issue was first mentioned in an alert posted to the Bugtraq security e-mail list on Feb. 2. The flaw, which was discovered by Richard Anthony Burton, allows a Javascript placed on a Web page visited by MSN Messenger users to obtain a user's display name for the chat program, as well as the names of all their contacts in the program, he wrote....

 


Comments: Post a Comment

Fair Use