up vote 1 down vote favorite
share [g+] share [fb]

i was watching this http://www.youtube.com/watch?v=CzdBCDPETxk

and was shocked that using IE, if u just visit a site, ur pc gets infected....

naturally i got curious. there was no window download popup or anything, and the pc victim computer got infected with a trojan.... how is this being done ? does it work for FF3 ?

link|improve this question
feedback

migrated from stackoverflow.com Jan 25 '10 at 8:46

This question came from our site for professional and enthusiast programmers.

1 Answer

up vote 4 down vote

Such attacks make use of security holes in the visiting browser that allow the execution of malicious code on the client`s computer. I theory, any browser can be vulnerable. Such vulnerabilities are usually fixed by the browser vendor, sometimes quicker, sometimes slower.

link|improve this answer
1  
Deja Vu, Pekka. Yesterday, on the radio, a local Microsoft spokesman on security matters was asked about problems with Internet Explorer, and whether last week's update would fix them. He replied that in theory all browsers can be vulnerable. He didn't say that some browsers are more vulnerable than others. – pavium Jan 25 '10 at 9:24
I didn't want to get into that for various reasons. Yes, Internet Explorer is extraordinarily often affected by vulnerabilities, and Firefox & consorts seem to be less so (at the moment). I am, however, noticing a dangerous trend of people thinking that only IE is vulnerable and installing Firefox ("much safer") is going to solve all their problems. This is not true, and we will see much more malware targeted at FF in the future due to its growing market share. Every browser is potentially vulnerable to security holes, period. (I install and recommend Firefox whenever I can, by the way.) – Pekka Jan 25 '10 at 22:04
feedback

Your Answer

 
or
required, but never shown
discard