October 27, 2006 3:21 PM PDT
Another flaw in IE 6 found
- Related Stories
-
Mozilla rebuts Firefox 2 bug reports
October 25, 2006 -
Spoofing bug found in IE 7
October 25, 2006 -
Zero-day attacks continue to hit Microsoft
September 27, 2006 -
Security pros provide interim IE patch
September 22, 2006
Microsoft is investigating a flaw in Internet Explorer 6, according to a posting on the software maker's Security Response Center blog. The ADODB.Connection ActiveX control in Internet Explorer 6.x may contain a vulnerability that can cause memory corruption, and therefore crash the browser.
It is possible this new threat, considered by Microsoft to be a low risk, could be used by criminal hackers for so-called "drive-by" downloads. This vulnerability has been assigned a National Vulnerability Database number of CVE-2006-5559. For instructions on disabling ActiveX, see this US-CERT document.
See more CNET content tagged:
flaw, Microsoft Internet Explorer 6, Microsoft Internet Explorer, Microsoft Corp., Web browser
8 comments
Join the conversation! Add your comment (Log in or register)
security risk. Set it on High Security and leave it alone.
navigate the file system?