Internet Explorer springs more leaks

Security researchers have reported a high-risk flaw in Microsoft's Outlook and Internet Explorer.

The hole could allow malicious code to be executed with minimal user interaction, according to security firm eEye Digital Security. The company claims to have notified Microsoft about the flaw on 5 May.

A spokeswoman for Microsoft confirmed that the company has been notified, and is investigating the issue.

"At this time, Microsoft is not aware of any malicious attacks attempting to exploit the reported vulnerabilities, and there is no customer impact based on this issue," she said.

The defect affects systems running Windows NT, 2000, XP and at least some versions of Windows 2003.

EEye notified Microsoft about two other flaws in Internet Explorer and Outlook on 16 March and 29 March, but the software giant has yet to release a patch for the problems.

Microsoft usually releases patches on a monthly basis to allow systems administrators to plan for the fixes, although an out-of-cycle patch can be issued in emergencies.

See also:

Microsoft calls in the FBI

Special Agent Gibson on the case  20 May 2005

Microsoft warns of TCP/IP flaw

Attacker could bring down a network connection  19 May 2005

Microsoft touts complete OneCare service

Subscription-based security software promises to protect PCs  13 May 2005

Microsoft issues 'maximum severity' Windows alert

Users urged to apply patch immediately  11 May 2005

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!