Friday, March 30th 2007
Another Internet Explorer vulnerability confirmed by Microsoft
This time specially prepared animated cursors embedded into e-mails or websites give offenders the ability to execute any code. This issue applies to the Internet Explorer 6 and 7 using Windows 2000 SP4, XP SP2, XP Professional x64, XP 64-Bit for Itanium, 2003 (regardless the SP), 2003 x64 and Vista.
Microsoft responded to this and until they release the corresponding security update suggest this workaround:
Source:
Microsoft TechNet
Microsoft responded to this and until they release the corresponding security update suggest this workaround:
As a best practice, users should always exercise extreme caution when opening or viewing unsolicited emails and email attachments from both known and unknown sources.Heise Security reports that the Security Service Provider Determina told Microsoft about this exposure last year in December already.
6 Comments on Another Internet Explorer vulnerability confirmed by Microsoft