Security Flaw: Any website can read your clipboard text

Security Flaw: Any website can read your clipboard text
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Security Flaw: Any website can read your clipboard text sudarmuthu 09-18-2005
Posted by on September 18, 2005, 9:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Web sites you visit can retrieve data from your clipboard depending on
your security settings. Go to this page (www.clipboard.googlemyway.com)
and see if anything shows up in the box. If you are using Firefox or
Opera you probably won't see anything. However, if you are using
Internet Explorer then chances are that whatever you last copied into
your clipboard will be displayed.


Posted by Frank Saunders, MS-MVP OE on September 18, 2005, 11:08 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Web sites you visit can retrieve data from your clipboard depending on
> your security settings. Go to this page
> (www.clipboard.googlemyway.com) and see if anything shows up in the
> box. If you are using Firefox or Opera you probably won't see
> anything. However, if you are using Internet Explorer then chances
> are that whatever you last copied into your clipboard will be
> displayed.

Big Deal. How often is there something in your clipboard you care about?

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx
http://defendingyourmachine.blogspot.com/



Posted by Roger Abell [MVP] on September 18, 2005, 5:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sort of old news now, with a patch IMO overdue.
However, you can, and should for reasons beyond this flaw,
use the IE security settings so that cut and paste is not enabled.

> Web sites you visit can retrieve data from your clipboard depending on
> your security settings. Go to this page (www.clipboard.googlemyway.com)
> and see if anything shows up in the box. If you are using Firefox or
> Opera you probably won't see anything. However, if you are using
> Internet Explorer then chances are that whatever you last copied into
> your clipboard will be displayed.
>



Similar ThreadsPosted
AVG and text clipboard April 24, 2007, 1:35 pm
Confusing GP text can open IE security hole November 13, 2007, 3:11 pm
Read vs Write/Read Access Rights November 15, 2005, 3:52 pm
Read only NTFS not allowing Read of MS Access October 8, 2008, 11:17 am
Yet another new outlook and IE security flaw discovered... September 9, 2005, 12:46 am
Security Flaw with Digital signatures in Microsoft Outlook August 1, 2006, 9:41 am
Clipboard vulnerability August 30, 2005, 1:45 am
Teen Website security January 21, 2006, 11:58 am
Looking for feedback on public website security config January 26, 2008, 1:08 am
Outlook 2007 Read Receipt Security Hole?! September 30, 2008, 8:12 am

The site map in XML format XML site map

Contact Us | Privacy Policy