After more than a month I wrote “Yet another “Don’t Use IE” article“, today more holes are found in IE and yet no further information about the patch for it.

Well, please don’t say I anti IE or siding Firefox, I write my posts based on articles that I come across. If firefox developers are slow in patching the vulnerable application, I’ll sure turn to other better alternatives as well. This post is nothing special but just another “Critical Holes Found In IE” article.

Security consultants at eEye Digital Security, has discovered high-risk vulnerabilities in two of Microsoft’s most widely used software programs, Internet Explorer web browser and Microsoft Outlook email client. These flaw found are serious ones, and they warned that users of the 2 dominant applications were at risk of PC hijack attacks.

Qouted:
“A vulnerability in default installations of the affected software allows malicious code to be executed, contingent upon minimal user interaction,” eEye said in a notice posted on its upcoming advisories Web page.

Users running Windows NT 4.0, fully patched Windows 2000 and Windows XP (even with Service Pack 2 installed) are all vulnerable, the security-research firm told Microsoft.

Qouted:
Marc Maiffret, eEye’s co-founder and chief hacking officer, told Ziff Davis Internet News that the vulnerability carries the highest severity rating because of the “ease with which an attacker can compromise a vulnerable system.”

Anyway, Microsoft and eEye are working on a fix but unfortunately no further information on when it will be available.

[Source]