Exposure of sensitive information in Internet Explorer

Internet Explorer Exposes Sensitive Information

A vulnerability has been identified in Internet Explorer, which exposes sensitive information to "msn.com" and "alexa.com".

While this is a known "feature" when the "Show Related Links" option is activated in Internet Explorer, there is a bug, so that Internet Explorer will keep transmitting the information to "msn.com" and "alexa.com" after "Show Related Links" has been de-activated. This occurs whenever "Ctrl+R" is used to reload a page.

Yet another reason to use Mozilla.

2 Comments

Mozilla has had a similar vulnerability and still ships with a sidebar panel that contacts Alexa without telling the user about Alexa's policies or anything like that.

http://bugzilla.mozilla.org/show_bug.cgi?id=50594
and
http://bugzilla.mozilla.org/show_bug.cgi?id=53239

Comment by Henri Sivonen at June 13, 2003 01:07 PM | Permalink

Both of those issues have been fixed!

Comment by Henrik Gemal at June 14, 2003 02:19 PM | Permalink

Post a comment