Developer's Guide to Web Application Security

The first item is especially interesting, as it allowed such software as the Back

Orifice 2000 remote installation install program to be executed on the user machine.

Back Orifice allows complete control of another user’s system.This leaves all the data

and control of a user’s machine completely open for someone else if there is a per-

manent connection to the Internet.

Buffer Overrun Error

A problem called a buffer overrun has plagued many ActiveX controls.The advisory

and patches for the buffer overrun bug were announced in the fourth quarter of

1999.The net result of this bug was that it allowed arbitrary code to be executed on

a user’s machine. A user ...