siliconman01
Global Moderator
Trojans! Chew 'em Up, Spit 'em Out...
Gender: 
Posts: 5508
|
 |
IE 6 Critical Update Available.
« on: Feb 3rd, 2004, 7:35am » |
 Quote  Modify
|
Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB832894)
Microsoft broke its once-a-month schedule on Monday to fix a critical flaw in Internet Explorer that could allow malicious coders to take control of an unwary user's PC.
The most serious problem, known as a cross-domain security vulnerability, affects all versions of Internet Explorer running on Windows NT, 2000 and XP. A person with a vulnerable system who clicks on a link in an HTML e-mail or goes to a hostile Web site could allow an attacker to run code on their computer, Microsoft said in its advisory.
The seriousness of the issue forced the company to release the latest fixes before its normally scheduled date, the second Tuesday of the month.
"We evaluated the public nature of the vulnerabilities and heard from customers that this was impacting them, and we made the decision to publish," said Stephen Toulouse, security program manager with Microsoft's Security Response Center.
The update also fixes two other security flaws, including one that gained a lot of attention for its ability to make fake Web sites look real. Known as the phishing flaw, the problem allows scam artists to forge the address in the Internet Explorer browser's address bar to display an address different from the actual site to which the user was being sent.
|
Mischel Internet Security Forum
Reply
Notify of replies
Send Topic
Print
Author
IP Logged
Search
Members
Login
Register