Terri Forslof, manager of security response at TippingPoint, confirmed with me today that any Java-enabled browser is potentially vulnerable. Internet Explorer is not, she said, given its sandbox feature, which "does handle the vulnerability appropriately," she said. A sandbox is an area in memory outside of which a program cannot make calls.

http://securitywatch.eweek.com/mac_hacked_by_quicktime_bug_as_serious_as_ani.html

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/488/1908#1908