Vulnerability Note VU#323070 at http://www.kb.cert.org/vuls/id/323070 is probably what they're talking about. Last item under "III. Solution" is "Use a different web browser" with the cited text about the several "significant security vulnerabilities".

Although the article is in restrained, committee-safe, bureaucratic prose, it does strike me as somewhat unusual for CERT to actually disrecommend a product in this way.

When I caught a bit of the NPR radio report on the Russian outbreak, I noticed that the announcer explicitly said that the vulnerability does not affect "other browsers, like Mozilla or Opera". This, too, is unusual.

There may be a sea change in the making. Scott Granneman's article on the 17th was certainly well timed.

(http://www.securityfocus.com/columnists/249)

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/8998/27146#27146