Resources for Federal Financial Institutions Examination Council (FFIEC)

New URI bugs could steal user data

www.itpro.co.uk

New flaws in the way popular internet browser handle external applications could put users at risk of having personal information stolen from them, according to security researchers.

Billy Rios and Nathan McFeters discovered a flaw in the way that Uniform Resource Identifers (URI) could be used to steal data from users.

While a lot of problems surrounding the way browsers deal with malformed data have been fixed through security updates of late, the two researchers have unearthed a couple of more problems. According to them, their attention has turned to the way hackers could use normal features of external applications launched via a browser window. The two label the flaw "functionality-based exploitation".

View the Resource

Share or bookmarklet this web page at: