Check your browser for security risks

Faram · Post by **Faram** » 2003-02-05 01:19pm

http://www.scanit.be/bcheck/index.php?

MSIE = 1 high, 2 medium for me

Mozilla = 0 risks

Post by **Dalton** » 2003-02-05 01:25pm

Holy shit!

MSIE:

High Risk Vulnerabilities 2
Medium Risk Vulnerabilities 2
Low Risk Vulnerabilities 1

Mozilla:

High Risk Vulnerabilities 0
Medium Risk Vulnerabilities 0
Low Risk Vulnerabilities 0

I love Mozilla.

Crayz9000 · Post by **Crayz9000** » 2003-02-05 01:40pm

Mozilla has no security risks, but apparently I've locked MSIE down so far that the test won't even run on it.

EDIT: Oops, opened the wrong link. Now MSIE's so thoroughly fucked up that it's even screwing up LiteStep.

CmdrWilkens · Post by **CmdrWilkens** » 2003-02-05 03:24pm

Opera 7:

High Risk Vulnerabilities: 0
Medium Risk Vulnerabilities : 1
Low Risk Vulnerabilities: 0

I'm still curious why it tells me to get IE 6 SP 1 when I'm not using IE and, in fact, it doesn't exist on my computer anymore.

Pu-239 · Post by **Pu-239** » 2003-02-05 03:25pm

0 security risks for mozilla, but the browser crashed shortly after.

It refuses to test IE4

Shinova · Post by **Shinova** » 2003-02-05 03:25pm

CmdrWilkens wrote:Opera 7:

High Risk Vulnerabilities: 0
Medium Risk Vulnerabilities : 1
Low Risk Vulnerabilities: 0

I'm still curious why it tells me to get IE 6 SP 1 when I'm not using IE and, in fact, it doesn't exist on my computer anymore.

Thats probably cause your opera's configured to identify itself as IE 5.

CmdrWilkens · Post by **CmdrWilkens** » 2003-02-05 03:26pm

Shinova wrote:
CmdrWilkens wrote:Opera 7:

High Risk Vulnerabilities: 0
Medium Risk Vulnerabilities : 1
Low Risk Vulnerabilities: 0

I'm still curious why it tells me to get IE 6 SP 1 when I'm not using IE and, in fact, it doesn't exist on my computer anymore.
Thats probably cause your opera's configured to identify itself as IE 5.

Nope it identifies itself as Opera (and 7 identifies itself as IE 6.0)

Lord Pounder · Post by **Lord Pounder** » 2003-02-05 03:43pm

I got something about a Syncronisation Error

Faram · Post by **Faram** » 2003-02-05 03:59pm

Okay latest security update for MSIE fixed the critical error.

Get it here:
Microsoft

Or Here
www.windowsupdate.com

Einhander Sn0m4n · Post by **Einhander Sn0m4n** » 2003-02-05 04:02pm

M$IE:
High Risk Vulnerabilities 1
Medium Risk Vulnerabilities 1
Low Risk Vulnerabilities 0

<<DANGER: SHIELDS PENETRATED!>>

Comments: The test was slow and opened a shitload of popups as well as several file-download boxes. One popup was uncloseable to the point of needing forcible termination with CTRL-ALT-DELETE.

Microsoft Internet Explorer IFRAME dialogArguments Cross-Zone Access Vulnerability (bid6205)
Description
This bug allows a web site to read the contents of any file on your computer. The web site has to know the exact path and name of the file. A malicious website may also be able to exploit this vulnerability to delete mail from your webmail account or to spoof trusted websites.

Update: A way was discovered to use bugs like this one to run locally installed programs with parameters. That means that a malicious web site can use this bug to perform any actions on vulnerable computer, such as, for example, delete files, install programs, etc.

Recommendations
No patches are available for this problem yet. Possible workaround is to disable Javascript

Yay.

Mozilla:
High Risk Vulnerabilities 0
Medium Risk Vulnerabilities 0
Low Risk Vulnerabilities 0

<<SHIELDS NOT PENETRATED!>>

Comments: The test went by very fast with no popups, file downloads, or any visual evidence of the hack attempts whatsoever. Mozilla remains usable and unaffected afterward.

Admiral Valdemar · Post by **Admiral Valdemar** » 2003-02-05 04:04pm

Dalton wrote:Holy shit!

MSIE:

High Risk Vulnerabilities 2
Medium Risk Vulnerabilities 2
Low Risk Vulnerabilities 1

Mozilla:

High Risk Vulnerabilities 0
Medium Risk Vulnerabilities 0
Low Risk Vulnerabilities 0

I love Mozilla.

I love Mozilla too.

It's a common fact that IE was practically invented to see how scriptkiddies could hack it, I can't understand why even beginners still use it.

Crayz9000 · Post by **Crayz9000** » 2003-02-05 04:11pm

Einhander Sn0m4n wrote:Comments: The test was slow and opened a shitload of popups as well as several file-download boxes. One popup was uncloseable to the point of needing forcible termination with CTRL-ALT-DELETE.

I enabled JavaScript the first time asked, then disabled it all other times. IE still got screwed up.