Symantec noted that the exploit requires "substantial typing from targeted users," so keyboard-based games, blogs, or other similar Web pages are likely to be created by attackers to entice users to enter the required text input to exploit the flaw.

Symantec and several other security firms have issued advisories for a new vulnerability discovered in Internet Explorer, Firefox, and other Web browsers running on Windows, Linux, and Mac systems.
The security companies are warning that the flaw, related to the way browsers handle JavaScript, could allow a specially crafted Web site to steal personal information, such as credit-card and bank-account numbers, from unsuspecting Internet users.

According to Symantec, the flaw affects all versions of Internet Explorer and Firefox.

"This issue is triggered by utilizing JavaScript 'OnKeyDown' events to capture and duplicate keystrokes from users," Symantec warned.

In its advisory, Symantec noted that the exploit requires "substantial typing from targeted users," so keyboard-based games, blogs, or other similar Web pages are likely to be created by attackers to entice users to enter the required text input to exploit the flaw.


Send to a friend | Permalink | Del.icio.us | Go To Top
Translate: