Microsoft is investigating reports of a serious security flaw in Internet Explorer, but has not yet seen malicious code that exploits the reported flaw, the company said today.
Security experts earlier this week warned that code exploiting a newly discovered security hole in IE is circulating on the Internet. The code exploits a buffer overflow vulnerability in IE 6 and has been confirmed on PCs running Windows XP with Service Pack 1 and Windows 2000, according to Danish Security company Secunia. The U.S. Computer Emergency Readiness Team issued an alert similar to the Secunia advisory. CERT warns that aside from the Web browser, applications such as e-mail clients that rely on browser controls may also be vulnerable. Attackers could gain complete control over a victim’s computer by exploiting the flaw, according to Secunia and CERT.
This stuff is nearly daily now. -KF
Source: PC World
Articles RSS