Critical IE patch issued
MICROSOFT has issued an out-of-schedule critical patch for its Internet Explorer web browser, plugging a security hole that could allow a hacker to take control of a PC.
The flaw allows the takeover of a PC via Internet Explorer 6 using specifically designed web pages. A number of different versions of the Windows operating system, from Windows 98 to Windows XP, are affected by the issue, which Microsoft has rated at its highest "critical" risk level.
"If a user is logged on with administrative privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges," Microsoft said in a security bulletin posted online.
"Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges," the bulletin says.
