Latest holes could allow malicious code to be executed
Latest holes could allow malicious code to be executed
R E L A T E D   C O N T E N T
ADVERTISEMENT

Internet Explorer springs more leaks

Two further 'high-risk' flaws added to existing unplugged holes

Tom Sanders in California, vnunet.com 17 May 2005
ADVERTISEMENT

Security researchers have reported a high-risk flaw in Microsoft's Outlook and Internet Explorer.

The hole could allow malicious code to be executed with minimal user interaction, according to security firm eEye Digital Security. The company claims to have notified Microsoft about the flaw on 5 May.

A spokeswoman for Microsoft confirmed that the company has been notified, and is investigating the issue.

"At this time, Microsoft is not aware of any malicious attacks attempting to exploit the reported vulnerabilities, and there is no customer impact based on this issue," she said.

The defect affects systems running Windows NT, 2000, XP and at least some versions of Windows 2003.

EEye notified Microsoft about two other flaws in Internet Explorer and Outlook on 16 March and 29 March, but the software giant has yet to release a patch for the problems.

Microsoft usually releases patches on a monthly basis to allow systems administrators to plan for the fixes, although an out-of-cycle patch can be issued in emergencies.

See also:

Former FBI man appointed chief security advisor in the UKSpecial Agent Gibson on the case  20 May 2005
Flaw could allow an attacker to set arbitrary timer values for a TCP connectionAttacker could bring down a network connection  19 May 2005
Microsoft's OneCare should be available by the end of the yearSubscription-based security software promises to protect PCs  13 May 2005
Remote code execution vulnerability rated 'maximum'Users urged to apply patch immediately  11 May 2005

All Bugs & Fixes

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story
R E A D E R   C O M M E N T S

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
Central London, United Kingdom | MI5 Security Services
Messaging System Engineer - Competitive salaries + excellent benefits - Central London Getting the best out of technology is critical to helping us protect the UK. Join MI5 and use your skills and experience to help ... more >
London, United Kingdom | Royal Borough of Kensington and Chelsea
Web Content Manager - c.£40,000 plus bonus - London   As one of the country's best-performing councils, we're always looking for new ways to improve on excellence. Providing an innovative, high-quality internet site for our ... more >
NEWCASTLE UPON TYNE, Tyne And Wear, United Kingdom | EDS
Position # 396338 Job Description We require a Network Architect who is responsible for the day to day technical oversight of the GNE organization within their assigned account. The GNE Network Architect is responsible for ... more >
London, Haringey, United Kingdom | Haringey Council
PMO Support Officer - Haringey, London - £32,289 - £37,542 pa   Experienced project support officer required by the internal IT services organisation of a London borough council to work within its Programme Management Office ... more >
More job opportunities