Thursday, December 01, 2005

Attackers targeting unpatched IE bug, Microsoft warns: "Microsoft issued a warning that attackers could exploit a critical unpatched bug in Internet Explorer, first reported in May, and take over a user's computer.News.)


The bug involves the way Internet Explorer processes the "Window()" function in JavaScript, a popular scripting language that Web developers use to make their sites more dynamic.
Microsoft's Windows Live Safety Center is now able to detect and remove the malicious software, Microsoft's advisory said.
The vulnerability affects Internet Explorer users on Windows XP, Windows 2000 and Windows 98, Microsoft said. "Customers who are running Windows Server 2003 and Windows Server 2003 Service Pack 1 in their default configurations, with the Enhanced Security Configuration turned on, are not affected," the advisory said.

No comments: