BitDefender issues fix for IE7 printing bug

By

Vulnerability in the way IE7 parses web pages for printing.

Security firm BitDefender claims to be the first to issue an update to protect against a new vulnerability in Microsoft's Internet Explorer 7.


Researchers issued a signature update to protect users against a flaw in the way IE7 parses web pages in preparation for printing.

The bug could allow a remote attacker to execute arbitrary code on a victim's machine if the victim tries to print a specially-crafted web page while including a table of links.

The vulnerability was discovered by independent security researcher Aviv Raffon, who also released proof-of-concept code.

"This exploitable vulnerability results from a combination of coding mistakes and sloppy security thinking," said BitDefender innovations product manager Alexandru Balan.

"The code has numerous bugs but it is also executed in a lower-security context than it should be and the combination opens a way for hackers to compromise a system."

BitDefender researchers warned that the exploit is well-suited for use in targeted attacks.

The firm advised all users of Internet Explorer to refrain from printing web pages with the 'Print Table of Links' option enabled until a fix is released.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

Qantas contacted by "potential cyber criminal"

Qantas contacted by "potential cyber criminal"

SA Power Networks tackles IAM, cloud security under five-year strategy

SA Power Networks tackles IAM, cloud security under five-year strategy

Log In

  |  Forgot your password?