eEye Flags Another IE Code Execution Flaw
Microsoft Corp. on Tuesday confirmed it was investigating a new "high risk" vulnerability in the widely used Internet Explorer Web browser. The software giant's acknowledgement follows the release of a brief advisory from Aliso Viejo, Calif.-based eEye Digital Security that the flaw could put millions of users at risk of code execution attacks.
"A vulnerability in default installations of the affected software allows malicious code to be executed," eEye said in a notice placed on its Upcoming Advisories Web page.
The company rated the flaw as "high risk" and warned that users of Internet Explorer, Windows 2000, Windows 2003, Windows XP and Windows XP SP1 were affected.