IE-6 privacy solution backfires

It may seem ironic, but privacy functionality in IE6 makes it possible to launch several attacks against the browser, and against Outlook and Outlook Express, security researcher Thor Larholm has discovered, Thomas C. Greene writes . "The privacy features added in IE6 to help protect a user's privacy by giving them direct control over cookie management allows any site to read any other site's cookies, in effect removing all privacy. Further, this hole extends to other protocols, allowing you to execute arbitrary commands on the user's machine as well as take over MSN Messenger," Larholm told us.

Full story at The Register USA