Stop using back button in Internet Explorer NOW!

[babysimon]

Exploit allows malicious site to execute arbitrary code by showing user 404 and assuming they click "Back".

Sample exploit (executes minesweeper) :

http://www.babysimon.co.uk/iebug.html

As always, Mozilla is available from http://www.mozilla.org/

Comments

[djm4]

Indeed. Here's a link to more information from McAfee, with a link to a patch from Microsoft.