Microsoft Internet Explorer JScript Vulnerability Description Internet Explorer is a web browser from Microsoft that supports Javascript. Microsoft has been notified by Georgi Guninski and NTBugTraq of a vulnerability with the code in some versions of IE4 that handles Javascript. In particular, very long strings arguments to the Window. External function of Javascript may be exploitable. If an Internet Explorer user visits a web site that includes Javascript maliciously designed to exploit this vulnerability, the script may be able to run arbitrary code on the user's machine.
Detailed instructions are in the security bulletin above.
For more information, see the Microsoft Security Bulletin above. We strongly urge you to encrypt any sensitive information you send by email. Contact the CERT staff for more information. Carnegie Mellon University makes no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. Carnegie Mellon University does not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement.