According to eEye, the vulnerabilities could be exploited with very little user interaction, meaning if an exploit were created, it could be very effective.
Microsoft claimed it is already investing the vulnerabilities. "At this time, Microsoft is not aware of any malicious attacks attempting to exploit the reported vulnerabilities, and there is no customer impact based on this issue," a spokesperson said. "Upon completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a fix through a service pack, our monthly release process or an out-of-cycle security update, depending on customer needs."
Traditionally Microsoft releases monthly updates, but occasionally, if the need is urgent, rolls them out earlier.
Earlier this month SC revealed a new report claiming Internet Explorer was "unsafe" for 98 percent of 2004. The figure is in marked contrast to Microsoft's biggest rival in the web browser market, Mozilla's Firefox, which was only vulnerable for 15 percent of the year, the report claimed.
