Posted by Newsroom on March 09, 1997 at 17:00:57:
Microsoft Internet Explorer 3 Security Fix
http://www.microsoft.com/ie/security/update.htm
Proving that Internet controversies really do move at the speed of
light, the latest security panic involving Microsoft Internet Explorer
(IE) began on February 27, 1997 and ended less than a week later. Paul
Greene, a student in Electrical Engineering at Worcester Polytechnic
Institute, discovered that a bug in IE version 3 for the Windows 95
and NT operating systems (users running previous versions of IE, or
those for other platforms, are not affected) allows nefarious
webmasters to sneak Shortcuts into web pages disguised as standard
hyperlinks. Greene put his findings on a website, along with example
hacks that manipulated users' file systems even with security set to
maximum. Microsoft leapt into action, designing a fix that it has made
freely available on its website. It also maintains that it has heard
from no users whose computers were actually affected by the defect.