IE flaw opens door to infection on sight

@ 2005/08/10
Microsoft has issued alerts on several security flaws in Windows, the most serious of which could allow an attacker to gain control over a computer.

The software maker released six security bulletins on Tuesday as part of its monthly patching cycle, describing three of them as "critical." The Redmond, Wash.-based company gives that rating to any security issue that could allow a malicious Internet worm to spread without any action required on the part of the user.

One bulletin addresses three vulnerabilities in the Internet Explorer, Microsoft's widely used Web browser. These issues carry the highest risk of attack out of all the issues fixed, Oliver Friedrichs, a senior manager at Symantec Security Response, said.

Two other flaws, affecting the plug-and-play feature and printing in Windows, could also spell some trouble for users, he said.

An error in the way IE handles JPEG images is especially alarming, according to Symantec. An attacker could commandeer a PC by crafting a malicious image and tricking the victim to look at it on a Web site or in an HTML e-mail, for example, Microsoft said in its MS05-038 security bulletin.

Plus more ..................

No comments available.