We just released
Security Advisory 977981 concerning an issue affecting Internet Explorer 6 and Internet Explorer 7 that could lead to remote code execution. At this time, we are not aware of any active attacks seeking to use this vulnerability. Our teams are currently working to develop an update and we will take appropriate action to protect customers when the update has met the quality bar for broad distribution. That may include releasing the update out of band.
I want to point out that Internet Explorer 8 is not affected on any platform and that running
Protected Mode in Internet Explorer 7 on Windows Vista mitigates this issue. We provide more guidance and workarounds in the advisory so I encourage customers to review it right away.
We are also working with our
Microsoft Active Protections Program (MAPP) and
Microsoft Security Response Alliance (MSRA) partners to help provide broader protections for customers. Together with our partners, we will continue to monitor the threat landscape and will take action against any web sites that seek to exploit this vulnerability.
The Security Advisory will be updated with any new developments so if you are not already subscribed to our
comprehensive alerts, please do so in order to be alerted by email when new information is added.
Thanks!
Jerry Bryant
*Postings are provided "AS IS" with no warranties, and confers no rights.*
Quote