Re: IE exploit runs code from graphics?

[st3ng4h <st3ng4h () comcast net>]

On Sat, Jun 26, 2004 at 07:12:36PM -0700, Jimmy Mitchener wrote:
> Why would you assume Mozilla is any less vulnerable? Perhaps not
> publicly, it is simply not as large of a target as IE. You should
> really not be browsing on an "important" system no matter what. Unless
> perhaps you have systrace or SELinux guarding it (which even then is
> not 100%).

Agreed. Any browser that isn't IE is safer, just because it's not a
target. Classic security through obscurity.

It can be argued it really is more secure because it's not embedded
into the OS like IE. But again, this applies to any browser that 
isn't IE. It'll be interesting to see, as it gains popularity, how
it will hold up when it starts becoming a worthwhile target.

Isn't this the same software that 'celebrated' its 200,000th bug a 
couple years ago? uh oh...

st3ng4h

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html