Trend Micro Toolbar + Long URL = Fail
Summary: Security researcher Alex Holden found that pasting a very long URL into the address bar crashes Firefox and IE8 when Trend Micro Internet Security's toolbar is enabled, while the same URL does not crash the browser with the toolbar disabled. Trend Micro said it expected to ship a downloadable hotfix on Tuesday, April 13 to correct the flaw, which Holden described as a basic Programming Security 101-type bug.
What's compelling: Holden noted the resulting browser crash may carry buffer overflow conditions that could potentially give a malicious attacker full user-level privilege, and that the simplicity of the exploit opens possibilities for redirects, site links, or shortened URLs on services like Twitter and Facebook to be exploited.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026