March 01, 2010

Microsoft looks into zero-day Internet Explorer flaw

Microsoft is investigating reports of a new vulnerability in Internet Explorer that could enable an attacker to run arbitrary code on a victim's machine if he or she is persuaded to visit a malicious website and press the "F1" key in response to a pop-up dialog box. The flaw, however, does not affect newer versions of the operating system: Windows 7, Vista and Server 2008, according to a post Sunday on the Microsoft Security Response Center blog. The bug, which involves the use of the VBScript language and Windows Help files, was revealed Friday by security firm iSEC. There have been no known attacks, Microsoft said. -- DK
Similar Articles

Sign up to our newsletters

More in News

Oracle releases Java update to close 37 high-risk vulnerabilities

Updates for the software platform will now arrive on a quarterly basis, beginning in October.

Flaw in BlackBerry Protect app addressed, impacts Z10 smartphone users

To exploit the vulnerability, an intruder would need a user's device password and a bit of skill to access troves of data on the phone.

Tor to blame for its users being unable to access Facebook

Malicious activity on the anonymity software's network tripped Facebook's "site integrity systems."