 |
• June 10, 2004 •
Two vulnerabilities have been reported in Internet Explorer 6, which in combination with other known issues can be exploited by malicious people to compromise a user's system.
According to reports, a malicious adware company is using these flaws to install an adware product on users machines that generates pop-up windows when users browse the Web.
Information about the vulnerabilities is available in a bulletin from security web site Secunia.
The solution in avoiding these bugs according to Secunia is to disable Active Scripting support for all but trusted web sites, something I've always suggested in this document: How to surf the Internet more safely with Internet Explorer.
According to Secunia, this problem is fixed in Service Pack 2, which should be available later this summer. In the mean time, Microsoft is said to be working on a fix, which would be released as soon as it is ready, instead of waiting for next month's scheduled release.
