Cookiejacking: 0-day exploit of all Internet Explorer versions
I mean, this is clever and all, but what am I missing? Isn't this just an IE bug? That you can access cookie files as IFRAME targets? Is there some part of the IE architecture that <i>depends</i> on that functionality, or is Microsoft just going to patch that?<p>Because pretty much all the browsers, on a better-than-quarterly basis, fall victim to attacks that allow arbitrary web pages to <i>upload code into their processes and run it</i>.<p>Just not sure this needed the "attack class" name.