Internet Explorer Users Face Threats of Dual Security Flaws in One Week

Late last week, a security vulnerability in Microsoft's Internet Explorer browser surfaced. The new zero-day bug occurs when a malformed HTML tag with a large quantity of script handlers is fed to the IE browser. The browser crashes as a result of attackers flooding its buffer. Those running an up to date system with Windows XP Service Pack 2 and using the most recent version of the browser, IE 6, are also at risk, as tests have confirmed vulnerability.

Remember, browse only sites you trust to reduce a nasty encounter. Also, consider using an alternate browser like Netscape or Firefox. These browsers are not susceptible to attack by the new zero-day bug.

For IE browser users, look forward to the release of Internet Explorer 7 which is scheduled for release later this year. The new version will have enhanced security and function features. At the present time, a beta 2 version of IE 7 is out.

Early this week a second possible security flaw surfaced. This flaw may allow a hacker to gain control of an individual's personal computer if it is Windows-based. IE browser users running IE 6 on Windows 98, Windows XP, and Windows 2003 server need beware of this potential, but very real, threat.

This security risk involves the way that the IE browser processes HTA files used in web applications. A hacker could run these files unbeknownst to the PC's user.

Microsoft is still investigating both of these issues and the next release of a security patch is scheduled for April 11th.

Although these flaws at the present time possess no hazardous threat, it serves as a reminder to keep your system up to date, use virus protective software, and to be alert of security issues.