Internet Explorer 7 reportedly suffers from a new Zero-day exploit

Internet Explorer 7 reportedly suffers from a new Zero-day exploit

A new Zero-day exploit has been reported for the Microsoft Internet Explorer 7 web browser.

This was one of the bugs that was left unpatched by the company in the just released Patch Tuesday for this month.

This has been revealed in a report by Bojan Zdrnja of the SANS Internet Storm Center.

The problem is related to a heap overflow within the XML parser in the IE 7 web browser.

For the exploit to be successful, the victim has to be running Windows XP or Windows Server 2003 along with IE 7 web browser.

Zdrnja stated in his post: “it does not appear to be wildly used, but as the code is publicly available, we can expect that this will happen very soon.”

Microsoft stated that they are investigating this report and they would take appropriate actions as required.

Checkout: 0-day exploit for Internet Explorer in the wild

Updated Information:

Internet Explorer Data Binding 0-Day Clarifications
Internet Explorer Data Binding Memory Corruption Vulnerability