Print
Discuss
Send to friend
RSS feedsTwo high risk flaws in Microsoft's Internet Explorer and Outlook have been reported by security vulnerability specialists eEye Digital Security.
The security holes could let an attacker take over a system with 'minimal user interaction', the company said in two security alerts posted on its web site.
The software holes affect the default installations of Internet Explorer and Outlook running on Windows NT 4.0, Windows 2000, Windows XP or Windows Server 2003.
A spokeswoman for Microsoft confirmed that the company has been notified about the flaws.
"At this time, Microsoft is not aware of any malicious attacks attempting to exploit the reported vulnerabilities, and there is no customer impact based on this issue," she said.
"Depending on the severity of the flaw, Microsoft will issue a fix through a service pack, one of the company's monthly patches or and out-of-cycle security update."
Microsoft usually distributes fixes through its monthly patches on the second Tuesday of the month. The company will release an out-of-cycle update in case of an emergency.
This has happened three times since it adopted the monthly patching cycle in October 2003. All three patches targeted critical flaws in Internet Explorer.
See also:
Two further 'high-risk' flaws added to existing unplugged holes 17 May 2005
Users who find flaws offered $500 per bug plus a free T-shirt 31 Mar 2005
Security group warns users to patch against buffer overflow vulnerability 05 Nov 2004All Bugs & Fixes
del.icio.us
Digg this
reddit!
