Microsoft Ponders New Critical Vulnerabilities Found In IE

A Danish security company, Secunia, has just released a report indicating that a new set of VERY critical security vulnerabilities have been discovered in Internet Explorer 6.0.

The Copenhagen, Denmark, company has classified the vulnerabilities as "extremely critical" and is advising all IE users to disable Active Scripting or "use another product."

The scripting flaws could allow hackers to bypass security and compromise systems, giving them access to sensitive information and cross-site scripting.

"If they care about Internet security, users should make sure to disable active scripting," said Thomas Kristensen, Secunia Chief Technology Officer today

Source: PCWorld

This new set of security flaws was originally discovered by a Chinese security researcher, Liu Die Yu, who had published proof of the vulnerabilities just yesterday.

On the other hand Microsoft only reaction was to advise users to download its latest IE cumulative patch, released November 11, while it looks into the new vulnerabilities.

Full story: Critical Flaws Found in IE
Will Microsoft break its monthly patch cycle to fix the new holes?