Microsoft finds new hole in old IE
News Web
Microsoft said it is is investigating new, public reports of a vulnerability in Internet Explorer 6 and Internet Explorer 7. The firm confirmed it was "aware of targeted attacks attempting to use this vulnerability," and in addition to publishing workarounds, the firm recommends updating to IE 8, which it says in unaffected. "In a web-based attack scenario, an attacker could host a web site that contains a web page that is used to exploit this vulnerability," the...
Articles related to «Microsoft finds new hole in old IE»
Microsoft Patch Tuesday leaves holes unplugged
News Web
Microsoft has confirmed that it will not be patching two known security flaws this Tuesday, despite seeing targeted attacks against at least one - meaning it could be a month before either flaw gets fixed.Although Microsoft will...
Older Windows OSes At Risk Of F1 Key Vulnerability
News Security
Software giant Microsoft has revealed that the company is currently investigating a critical security issue in the Windows XP Service Pack 3 that comes from the Windows Visual Basic language and Windows Help for its Internet...
Sourcefire pushes IE7 updates to customers
News Security
Open source innovator and SNORT creator, Sourcefire announced that the Sourcefire Vulnerability Research Team (VRT) delivered rules that protected Sourcefire customers and Snort users for close to a month prior to the recent...
New zero day
News Security
Direct/X vulnerability, of some concern. Secunia has a good overview here. CERT has this:By convincing a user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be...
Microsoft advisory published on VML zero day exploit
News Security
MS security response blog entry:Based on our investigation, this exploit code could allow an attacker to execute arbitrary code on the user's system. We also want you to know that we’re aware that this vulnerability is being...
