You are here: silicon.com > Software > Malware

Malware

Secunia hits upon an unknown IE flaw

While probing a known one...

Tags: secunia, ie flaw, ie hole, flaw

By Greg Sandoval

Published: 3 May 2006 08:35 GMT

As researchers pored over a vulnerability found within Microsoft's Internet Explorer less than a week ago, they discovered a totally new IE flaw.

The new bug could be used to launch code execution attacks. Microsoft acknowledged that the vulnerability, found by Andreas Sandblad of Secunia, is not just a successful exploit of the flaw uncovered last week by Michal Zalewski.

It was originally believed the flaw found by Sandblad was related to the one discovered by Zalewski but a Microsoft representative confirmed that the two vulnerabilities are separate.

Referring to the bug found by Zalewski, security company Secunia wrote on its website on Tuesday: "During analysis, Secunia discovered a variant of this vulnerability." The company confirmed the problem "on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP2".

Both flaws could be used to corrupt a PC's memory if the computer's user can be tricked into visiting a malicious website, Secunia said.

Secunia added that Microsoft is working on a patch.

Greg Sandoval writes for CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Web Applications Vulnerability Tester

Title: Web Applications Vulnerability Tester / Penetration Tester Salary: market rates but probably 40k to 60k Company: online / ecommerce company ...

Test Manager, Devon, Test Plans Regression Automated Bug Tracking

Bug tracking software. Test Plans, Regression Testing, Automated Testing, Bug Tracking Navigation has partnered with a leading agency with offices ...

Security Operations Centre Manager (SOC Manager), SC Security Cleared

Basic awareness of computer based vulnerability analysis testing. Moderate awareness of computer based vulnerability analysis testing. You will be ...

Agenda Setters 2009
Welcome to the ninth annual Agenda Setters poll – silicon.com's list of the top 50 most influential individuals in the technology and IT industries, from techies and CIOs to entrepreneurs and business leaders. Find out more in our latest special report.





Quick Sitemap Links: