Microsoft is looking into a pair of new security holes in Internet Explorer (IE) that attackers could use to cause a denial of service or launch malicious code. Proof-of-concept exploit code has been written for one of the flaws.
One issue was discovered by vulnerability researcher Jeffrey van der Stad. In a posting on his Web site, he said the software giant had run its own tests and confirmed the flaw. He quoted a Microsoft security team member as saying, "We have been trying to get this fix into the next IE release, but it's been a lot of work to do that, as it's relatively late in the cycle. It looks like it will make it in, though."
|