|
|
Article: Critical IE, Vista Flaws Patched; Microsoft posts six security advisories for its June Patch Tuesday, four of which address flaws that are critical and could allow remote attackers to take over a system.
- Article from:
- eWeek
- Article date:
- June 12, 2007
- Author:
CopyrightCopyright (c) 2007 Ziff Davis Media Inc. All Rights Reserved. Originally appearing in eWEEK.com. Provided by ProQuest LLC. (Hide copyright information)
|
Internet Explorer is suffering from six vulnerabilities, five privately reported and one publicly disclosed, all of which are addressed in security bulletin MS07-033. Microsoft officials said June 12 that all but one of the IE flaws could allow system hijacking if a user were to visit a malicious Web page. One of the flaws allows spoofing and also requires a malicious Web page visit.
In all cases of possible remote code execution, users who have configured IE to have fewer user rights could be at less risk than those running IE with administrative rights. For one of the vulnerabilities-the spoofing problem-user interaction is required.
Microsoft officials said the IE problem is critical ...