19 September 2006

Exploit code aimed at new IE flaw

"Computer code that could be used to hijack Windows PCs via a yet-to-be-patched Internet Explorer flaw has been posted on the Net, experts have warned.

IE versions 5.01 and 6 on all current versions of Windows are affected, the French Security Incident Response Team, or FrSIRT, a security-monitoring company, said in an alert Wednesday. FrSIRT deems the issue "critical", its most serious rating. Microsoft noted that Windows 2003 running Enhanced Security Configuration is not affected.

In recent months, word of new attacks has repeatedly followed shortly after "Patch Tuesday". Some experts believe the timing of the new attack is no coincidence, suggesting that attackers look to take advantage of a full month before Microsoft is scheduled to release its next bunch of fixes."

Click on the link below for the full article:

http://news.zdnet.co.uk/0,39020330,39283354,00.htm

No comments: