Microsoft: New IE flaw limited in scope
Microsoft has given more details on an Internet Explorer security bug discovered this week, saying the flaw puts only some systems at risk.
The security hole, reported on Wednesday by the French Security Incident Response Team, involves the Microsoft DDS Library Shape Control file. The Msdds.dll file has to be present on a computer for the machine to be vulnerable to possible compromise by an outside attacker.
The file is put on a computer only with Microsoft's Visual Studio 2002 and certain Office XP installations, according to a Microsoft alert updated on Friday.
Visual Studio is a tool designed for developers, so most home PCs will likely not have the file. In addition, Visual Studio 2002 is an older version. People who have updated their PCs to Visual Studio 2002 Service Pack 1 are not vulnerable, Microsoft said.
