Microsoft: More Internet Explorer Vulnerabilities Discovered

Amid beginning the distribution several important patches from Microsoft Office, Microsoft Movie Maker, and Microsoft Producer 2003, Microsoft is warning Internet Explorer users of a new “zero-day” vulnerability discovered on the world’s most popular web browser.

The exploit, according to Microsoft, is already being taken advantage of on the internet, though attacks appear to be targeted. Systems susceptible to attack include Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6 along with Internet Explorer 7. Microsoft notes that “Internet Explorer 8 and Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 are not affected,” according to CRN.

The exploit occurs as a result of a invalid pointer reference within Internet Explorer. This could allow attackers to initiate the launch of malware files “when the pointer reference is accessed after an object is deleted.”

“At this time, we are aware of targeted attacks attempting to use this vulnerability. We will continue to monitor the threat environment and update this advisory if this situation changes,” said Microsoft in their warning.

[ via CRN ]