Microsoft denies reports of first IE7 security flaw

By

Microsoft has dismissed reports of a security vulnerability in its Internet Explorer 7 browser as "inaccurate".


Microsoft has dismissed reports of a security vulnerability in its Internet Explorer 7 browser as "inaccurate".

Danish security firm Secunia on Thursday claimed that it had discovered a vulnerability in the new version of the Microsoft browser. The firm rated the flaw as "less critical".

An attacker could exploit the vulnerability by luring a user to a specially crafted website. Once that site is accessed, the attacker gains access to any information from other websites that the user is visiting at the same time, including online banking and email services, according to Secunia.

Microsoft didn't challenge the fact that the flaw could lead to information disclosure, but denied that it affected the Internet Explorer 7 browser that was released on Wednesday.

"These reports are technically inaccurate, the issue concerned in these reports is not in Internet Explorer 7 (or any other version) at all," Christopher Budd, a security program manager with Microsoft, argued in a posting to the Microsoft Security Response Center Blog.

"Rather, it is in a different Windows component, specifically a component in Outlook Express. While these reports use Internet Explorer as a vector the vulnerability itself is in Outlook Express."

He added that Microsoft isn't aware of any attacks exploiting the Outlook flaw and that the company plans to keep monitoring the situation.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Log In

  |  Forgot your password?