Microsoft denies reports of first IE7 security flaw

Powered by SC Magazine
 

Microsoft has dismissed reports of a security vulnerability in its Internet Explorer 7 browser as "inaccurate".

Microsoft has dismissed reports of a security vulnerability in its Internet Explorer 7 browser as "inaccurate".

Danish security firm Secunia on Thursday claimed that it had discovered a vulnerability in the new version of the Microsoft browser. The firm rated the flaw as "less critical".

An attacker could exploit the vulnerability by luring a user to a specially crafted website. Once that site is accessed, the attacker gains access to any information from other websites that the user is visiting at the same time, including online banking and email services, according to Secunia.

Microsoft didn't challenge the fact that the flaw could lead to information disclosure, but denied that it affected the Internet Explorer 7 browser that was released on Wednesday.

"These reports are technically inaccurate, the issue concerned in these reports is not in Internet Explorer 7 (or any other version) at all," Christopher Budd, a security program manager with Microsoft, argued in a posting to the Microsoft Security Response Center Blog.

"Rather, it is in a different Windows component, specifically a component in Outlook Express. While these reports use Internet Explorer as a vector the vulnerability itself is in Outlook Express."

He added that Microsoft isn't aware of any attacks exploiting the Outlook flaw and that the company plans to keep monitoring the situation.

Copyright ©v3.co.uk


 
 
 
Top Stories
Earning the right to innovate
Breaking down the barriers to innovation is a long, but rewarding process, says Bank of Queensland Group CIO, Julie Bale.
 
A call for timely reporting
[Blog post] Businesses need incentives to keep customer data secure.
 
Doubts cast on Queensland's ICT Dashboard
Opposition, former Govt CIO say it can't be trusted.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Have customers that won't pay debts?
Jul 10, 2014
The ACCC and ASIC have updated their advice when it comes to collecting debts.
Carpet cleaner faces court over online testimonials
Jul 4, 2014
The ACCC has initiated proceedings against A Whistle (1979) Pty Ltd, the franchisor of Electrodry...
You can now get 15GB of free online storage using Microsoft OneDrive
Jun 25, 2014
Cloud storage has reached both the capacity and price where it's a viable alternative to local ...
Another clever trick you can perform with Xero
Jun 25, 2014
Here is another way to reach out to particular subsets of your customers using Xero.
Have a phone, tablet and laptop?
Jun 20, 2014
This new Telstra pre-paid 4G mobile hotspot might be useful if you regularly need to use fast ...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  25%
 
Application integration concerns
  3%
 
Security and compliance concerns
  29%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  23%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  5%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 823

Vote