Stop using back button in Internet Explorer NOW!

[babysimon]

Exploit allows malicious site to execute arbitrary code by showing user 404 and assuming they click "Back".

Sample exploit (executes minesweeper) :

http://www.babysimon.co.uk/iebug.html

As always, Mozilla is available from http://www.mozilla.org/

Comments

[lovingboth]

Well, your sample doesn't seem to work with IE 5.00.something.something.

That's useful - despite being the version shipped with Win98SE, MS seem to have discontinued support for it, and I don't want to 'upgrade' to 5.5 or 6.0