Cookie Data in IE Can Be Exposed or Altered Through Script Injection!

Published by

Microsoft have released a security bulletin (but no patch!) to inform users that a vunerability exists in IE 5.5 and 6.0 which can allow the exposure and altering of data in cookies.

Who should read this bulletin: Customers using Microsoft® Internet Explorer

Impact of vulnerability: Exposure and altering of data in cookies.

Maximum Severity Rating: High

Recommendation: Customers should consider disabling active scripting in the Internet Zone and the Intranet Zone. Customers using Outlook Express who have not set OE to use the "Restricted Sites" Zone should do so as a best practice.

Microsoft Security Bulletin MS01-055