Internet Explorer vulnerability affect more versions
December 14th, 2008 Leave a comment Visited 53 times, 3 so far today
Internet Explorer vulnerability affects more versions
Microsoft has confirmed that the recently revealed security issue in their Internet Explorer web browser is more widespread than they had originally claimed.
The company said in a revised security advisory that users of IE5.01, IE6 and IE7 along with IE8 Beta 2 running on Windows 2000, XP, Vista, Server 2003 or Server 2008 can be targeted using the problem.
Microsoft however continues to claim that the problem is not widespread on the web: “At this time, we are aware only of limited attacks that attempt to use this vulnerability against Windows Internet Explorer 7.”
The company added that the problem lies in the IE’s data binding functionality. Sources had claimed that the problem existed in the rendering engine of Internet Explorer.
Checkout: Vulnerability in Internet Explorer Could Allow Remote Code Execution
|
TechWhack on Facebook
|

December 18th, 2008 at 05:27 am
Is there *ANY* evidence that IE6 is *REALLY* vulnerable to this exploit?
There is example exploit code on milw0rm that ONLY works on IE7. Is there *ANY* example exploit code that works on IE6?
I don’t trust that MilkroSoft is the ONLY source for the statement that IE6 and IE5 are also vulnerable.