Security Issues: Use of Lycos May Cause Problems

[gary price]

Hello from D.C.

This story might be of interest to the list.


"Lycos Bug Lets Malicious Web Pages Crash PCs"
>From the article, "Lycos has a bug in its search engine that could allow
malicious Web pages to crash users' computers, according to bug hunters. It
emerged last week that the way Lycos renders HTML in its search results
could allow JavaScript to be launched from the results page without the
knowledge of Lycos or the end user. This could be used to merely launch spam
pop-up windows or, using documented malicious JavaScript tricks, to crash
the user's computer."
http://news.zdnet.co.uk/story/0,,t269-s2092618,00.html


See Also: Lycos Open to Malicious Attacks (Silicon.Com)
http://www.silicon.com/public/door?6004REQEVENT=&REQINT1=46168&REQSTR1=silic
on.com


See Also: Search Engines HTML Parsing Vulnerability (SecuriTeam.Com)
http://www.securiteam.com/securitynews/5PP0L2A4UC.html



cheers,
gary



Looking for More News, New Sites, Search Tips?
Visit the Virtual Acquisition Shelf and News Desk
http://resourceshelf.blogspot.com


Gary D. Price, MLIS
Librarian
Gary Price Library Research and Internet Consulting
gprice at gwu.edu