You are here: silicon.com > Software > Malware

Secunia hits upon an unknown IE flaw

While probing a known one...

Tags: secunia, ie flaw, ie hole, flaw

By Greg Sandoval

Published: 3 May 2006 08:35 GMT

As researchers pored over a vulnerability found within Microsoft's Internet Explorer less than a week ago, they discovered a totally new IE flaw.

The new bug could be used to launch code execution attacks. Microsoft acknowledged that the vulnerability, found by Andreas Sandblad of Secunia, is not just a successful exploit of the flaw uncovered last week by Michal Zalewski.

It was originally believed the flaw found by Sandblad was related to the one discovered by Zalewski but a Microsoft representative confirmed that the two vulnerabilities are separate.

Referring to the bug found by Zalewski, security company Secunia wrote on its website on Tuesday: "During analysis, Secunia discovered a variant of this vulnerability." The company confirmed the problem "on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP2".

Both flaws could be used to corrupt a PC's memory if the computer's user can be tricked into visiting a malicious website, Secunia said.

Secunia added that Microsoft is working on a patch.

Greg Sandoval writes for CNET News.com

Add comment

Print story with

Email story

IE exploit could unleash email virus

IE 7 gets its own 'bugzilla'

New IE security flaw could aid phishing scams

Windows fix in patch of bother

Microsoft puts IE 7 to the test

Group bug: Flaws flagged in IE, Mozilla, Safari

In silicon.com

Commentary

Clive Longbottom Windows 7: Not perfect - but ready for prime time Microsoft's latest OS fixes most of Vista's ills - but still has challenges ahead

Stephen Kleynhans Mind the details with Windows 7 Just because it might work better than Vista, it doesn't mean you can be sloppy

Latest News

Phishers set their sights on corporate accounts

Tax-refund phishing scams hit an all-time high

First critical Windows 7 patches released

Online fraudsters enlist Trojans to run off with your money

Microsoft files lawsuits in malicious-ad crackdown

Jobs

Security Consultants - Penetration Testing / Vulnerability Assessment

URGENT - PEN TESTER - WEB APPS (HOMEBASED / REMOTE) to start THIS MONDAY; Dureation 1 WEEK + EXTENSION (Cica 20 days) for an urgent security pen ...

Check Team Leader / Check Team Member

One of our key clients is an independent, stable and well respected corporate data security specialist with a burgeoning Penetration Testing and ...

.Net Developer Required

The current standards are all based on Microsoft Internet Explorer so .NET is the preferred option although ASP.NET is also desirable. My publice ...

Special Report Focus

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.