Patched Internet Explorer still unsafe

By

A Dutch security researcher has discovered another flaw in Microsoft’s Internet Explorer.

The IE vulnerability, which is the third found in a month, could provide the same avenue as the other flaws for installing spyware on a machine.


In a prepared statement, a Microsoft spokesperson said: "Microsoft is working to provide a series of security updates to Internet Explorer in coming weeks that will provide additional protection for our customers.

"The intentional use of exploit code to cause damage is a criminal offence; accordingly, Microsoft continues to work aggressively with law enforcement to help prosecute individuals or organizations who engage in these activities."

If exploited the flaw compromises a Windows ActiveX component called Shell.Application.

The vulnerability is similar to the JS.Scob.Trojan, which appeared last month and attacked IIS servers and spread malware through IE's ActiveX scripting.

Computer student Jelmer Kuperus found the vulnerability.

www.microsoft.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?