Rating:
|
Digg this ::
Slashdot ::
Del.icio.us | [?]

Microsoft has more trouble with its web browser, as a new vulnerability can now be exploited.
The French Security Incident Response Team, or FrSIRT, a security-monitoring company, issued an alert on Wednesday, to warn about a computer code that has benn posted on the Internet which could be used to hijack Windows PCs via an Internet Explorer flaw.
This flaw is due to a memory corruption error when processing a specially crafted argument passed to the “KeyFrame()” method of a “DirectAnimation.PathControl” (daxctle.ocx) ActiveX object, which could be exploited by attackers to cause a denial of service or execute arbitrary commands by convincing a user to visit a malicious Web page.
The 5.01 and 6 version of Internet Explorer on all current versions of Windows are affected by the malicious code. FrSIRT tagged it’s alert as critical, which is its most serious rating.
According to ZDNet, a Microsoft representative said in a statement on Thursday, that “Microsoft’s initial investigation reveals that this exploit code could allow an attacker to execute memory corruption” and suggested that Windows users should disable ActiveX and active control scripting controls, as a workaround to protect against potential attacks.
It looks like the people behind the code attacks over the Internet, now found a new way to get the most out if their victims. Usually, as a flaw appears, Microsoft manages to patch it in one of its monthly patch releases, but now, flaws are revealed just days after the latest monthly patch, so the vulnerability can be exploited for as long as possible.
Tags: Microsoft, Windows, exploit, security, Internet Explorer
No comments






