Re: Could this virus exploit end up embedded ...

I'm not sure, but you might check out a new newsgroup that Microsoft started
yesterday, called microsoft.public.scripting.virus.discussion
A lot of good conversation is going on there.
~ Kathleen Anderson
Spider Web Woman Designs
mailto:kathleen(at)spiderwebwoman.com
http://www.spiderwebwoman.com/
AWARE:  http://aware.hwg.org/

"Never say you don't have enough time...You have exactly the same number of
hours per day that were given to Helen Keller, Pasteur, Michelangelo, Mother
Teresa, Leonardo da Vinci, Thomas Jefferson, and Albert Einstein." - Unknown








----- Original Message -----
From: KathyW <kathyw(at)home.albury.net.au>
To: <hwg-languages(at)hwg.org>
Sent: Sunday, May 07, 2000 8:25 PM
Subject: Could this virus exploit end up embedded ...


> ... in a web page?
>
> Being one who has avoided m$ proprietary formats for a looooong time, I
don't
> know enough about how they work/can be used to say yay or nay but could
this
> recent vbx (or is it vbs - I hear conflicting reports) script end up
embedded in
> web pages, and if so, would it only affect browsers that supported vbx/s
(IE and
> it's 'clones')?
>
> Javascript is heavilly sand-boxed, as is java (my two preferred
technologies).
> If vbx/s could be so exploited/exploitable, how has this situation been
allowed
> to develop? Every time a new javascript or java exploit is found it gets
jumped
> on and plugged up big time.
>
> Anyway, what I'd really like to know is
> a) does the risk exist that the latest round of exploits are
possible/likely to
> end up embedded in web pages and if so
> b) who or what software is at risk and
> c) can this type of scripting be turned off without disabling javascript
as
> well in those browsers?
>
> KathyW.
>
> Red Hat Linux 6.1 (kernel 2.2.14)
> Sun JDK1.2.2
> PolarBarMailer16b (beta/alpha ... what the heck, I like it ;-)
>
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA