Patched Internet Explorer still unsafe

By

A Dutch security researcher has discovered another flaw in Microsoft’s Internet Explorer.

The IE vulnerability, which is the third found in a month, could provide the same avenue as the other flaws for installing spyware on a machine.


In a prepared statement, a Microsoft spokesperson said: "Microsoft is working to provide a series of security updates to Internet Explorer in coming weeks that will provide additional protection for our customers.

"The intentional use of exploit code to cause damage is a criminal offence; accordingly, Microsoft continues to work aggressively with law enforcement to help prosecute individuals or organizations who engage in these activities."

If exploited the flaw compromises a Windows ActiveX component called Shell.Application.

The vulnerability is similar to the JS.Scob.Trojan, which appeared last month and attacked IIS servers and spread malware through IE's ActiveX scripting.

Computer student Jelmer Kuperus found the vulnerability.

www.microsoft.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Palo Alto Networks in talks to buy CyberArk

Palo Alto Networks in talks to buy CyberArk

Gov to encourage vuln research, puts insurers and NFPs on notice

Gov to encourage vuln research, puts insurers and NFPs on notice

"Scattered Spider" evolves with new ransomware and social engineering tactics

"Scattered Spider" evolves with new ransomware and social engineering tactics

Allianz Life says majority of US customers' data stolen in hack

Allianz Life says majority of US customers' data stolen in hack

Log In

  |  Forgot your password?