Two serious security flaws that could allow an attacker to take over a user's system exist in all current versions of Microsoft's Corp.'s Internet Explorer (IE) Web browser, including the one that ships with Windows Server 2003, Microsoft said today.
Affected are IE Versions 5.01, 5.5, 6.0 and 6.0 for Windows Server 2003, Microsoft said in Security Bulletin MS03-020. The bulletin includes a software patch for all browser versions that the software vendor is urging users to install immediately.
With the announcement, Microsoft released its first security patch for Windows Server 2003, two months after the launch of the server product, touted as one of its most secure products ever. The company was quick to stress that it had not failed to deliver on its security promise, but that in fact the flaws demonstrate that its "secure by design, secure by default, and secure by deployment" approach is paying off.
|