SHARE
Microsoft pushes fixes for critical Internet Explorer flaw
By Steve Ragan
Excerpt:
The vulnerability, one that specifically affects IE versions 5, 6, and 7 under Windows 2000/2003/XP and Vista, was disclosed by Core Security today. Core says this flaw could potentially lead to malicious or infected URLs remotely executing scripts on systems running the affected versions of IE, via either drive-by or downloaded attacks, without the end user;s knowledge or permission to do so.
Moreover, exploitation of the vulnerability allows an attacker to retrieve security and privacy-sensitive data such as authentication credentials, HTTP cookies and other details of HTTP session state, as well as the contents of any local file.
Source: The Tech Herald
