Microsoft's Internet Explorer and Mozilla's Firefox are both vulnerable to a new JavaScript flaw that could allow attackers to steal confidential information.
The flaw affects fully patched browsers on Windows, Linux and Mac systems, according to a posting on the Full Disclosure security mailing list.
The issue is caused by the 'OnKeyDown' JavaScript feature that allows websites to capture and duplicate keystrokes entered into data fields, including fields where users enter credit card information.
Security experts noted that exploiting the flaw would require the user to type a fair amount of text. Attackers would therefore most likely target online games or blogs.
Security website Secunia rated the flaw 'less critical' for Internet Explorer and Firefox.
Although the flaw requires a sophisticated attacker to effectively exploit it, it is noteworthy because it spans multiple operating systems and browser vendors.
The SANS Internet Storm Centre warned users to be cautious in allowing JavaScript to run.
Post your comment
Send an email to the Computing editor at feedback@computing.co.uk
del.icio.us
digg this
reddit!
Partnership with Intel will see hardware and software upgrade to improve film creation 08 Jul 2008
Virtualisation specialist also warns that full-year sales will be below expectations 08 Jul 2008
Fraud should be reported to police, not banks and consumers must have more protection, says Committee 08 Jul 2008
More news
Warmer datacentres and print management spearhead green push 03 Jul 2008
Open source tool in development to measure workload-based data centre carbon output 02 Jul 2008
Cutting fuel costs and improved services high on airline’s agenda 03 Jul 2008 More in depth
Advertising Marketplace
- Enterprise Accounting Solutions
- Business Intelligence Solutions
- Enterprise Content Management (ECM)
- Supply Chain Management
- Enterprise Resource Planning (ERP)
- Project Management Solutions
- Customer Relationship Management (CRM)
- Security Solutions
- Systems Management
- Networking and Communications Solutions
Featured jobs
More job opportunities