Reply to post:

Microsoft's Jet crash: Zero-day flaw drops after deadline passes

Remy Redert

Because that local file can be downloaded and opened by executing javascript. In fact, that seems to be the preferred method, since the target Jet needs to be 32-bit and a lot of people are still using 32-bit browsers, which will call the 32-bit Jet to handle a Jet file it's been tricked into executing.

The mitigation is to run only 64-bit applications and to not execute Javascript from untrusted sources.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019