Stop using back button in Internet Explorer NOW!

[babysimon]

Exploit allows malicious site to execute arbitrary code by showing user 404 and assuming they click "Back".

Sample exploit (executes minesweeper) :

http://www.babysimon.co.uk/iebug.html

As always, Mozilla is available from http://www.mozilla.org/

Comments

[babysimon]

http://online.securityfocus.com/archive/1/267561

via slashdot (I only read it for the headlines!)