main
Report a problem

Internet Explorer 7 - 24 hours and 1 vulnerability

Tom Warren   on 19 October 2006 - 09:30 · 58 comments & 222966 views

Advertisement (Why?)
Microsoft released their latest Internet Explorer yesterday with so called new security features and functionality.

Less than 24 hours have passed and there is already a vulnerability.

A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site.

Test code is readily available and the threat is marked as less critical.

View: Secunia Advisory

Post a comment · Send to friend Comments · There are 58 additional comments
#1 Neobond on 19 Oct 2006 - 09:40
This vulnerability was also present in IE6 See this link which was added in April this year, there must be a reason they didn't patch it for IE6/7 yet.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)