Fergie's Tech Blog

Yet Another Vulnerability Plagues IE

Gregg Keizer writes on TechWeb News:

Microsoft's Internet Explorer, which was just patched with 10 fixes two weeks ago, suffers from yet another zero-day vulnerability that can be exploited remotely, security firm Symantec said Monday.

In an alert to customers of its DeepSight threat system, Symantec cited a vulnerability first posted to the Bugtraq security mailing list by researcher Michal Zalewski, who notes that IE is prone to memory corruption because of the way it handles malformed HTML.

More here.


Update: Secunia has posted details of this vulnerability here.

posted by Fergie @ 4/25/2006 07:09:00 AM