Internet Explorer vulnerability could allow access to user files

Sky See Speak and Surf

Subscribe to SeekBroadband

Get the latest news, special offers, reviews and more.

NB. We will never pass your email onto third parties.

 Subscribe in a reader

Manoj Solanki, Thursday February 4, 2010 - 10:14 PM

Microsoft has warned of a vulnerability in several versions of Internet Explorer that could allow an attacker access to files on a user’s computer.

The main risk is to users running Internet Explorer on Windows XP or those who have disabled Internet Explorer Protected Mode according to Microsoft.  Other operating systems such as Windows Vista, Windows server 2008, Windows 7 and Windows Server 2008 have Protected Mode enabled by default, unless a user has changed the configuration.  Various versions of Internet Explorer, from 5.01 up to 8 are affected on some of these operating systems.

Any version of Internet Explorer exposed to the vulnerability could access files where the filename and location is already known.  Microsoft said in the security warning that it was unaware of any attacks trying to exploit the vulnerability.

Full details and advice for users can be found at this Microsoft Security Advisory.

Recently a petition was launched on the Number 10 website to get government departments to upgrade from IE6 in the workplace due to potential security issues and increasingly poor support when accessing some websites.

Google also recently announced that it is to phase out support for IE6 on many of its services.


Bookmark and Share


Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

NOTE: All commments are reviewed by us before being posted. Please ensure your comments are NOT Off Topic, Spam, Personal Attacks, Illegal or use profane or provocative language. Any feedback, or comments about the article in general, or corrections, should not be made here, but by contacting us using the relevant link.