New vulnerability in Microsoft's browser

Jul 16, 2007 13:51 GMT  ·  By

The famous Microsoft browser Internet Explorer is about to get a new patch soon because the security companies discovered a new security hole that might allow a malicious person to attack the user's computer. Security firm Secunia rated the flaw as less critical but confirmed the hole was identified on a fully patched Windows XP SP2 operating system running Internet Explorer 7.

However, older versions might be also affected but there are no reports available yet. This vulnerability is extremely important for the Redmond company as its top browser, Internet Explorer 7 is involved into the battle with Firefox and other applications for the leader position of the category.

"Michal Zalewski has discovered a vulnerability in Internet Explorer, which can be exploited by a malicious website to spoof the address bar. The vulnerability is caused due to an error in the handling of the "document.open()" method and can be exploited to spoof the address bar if e.g. the user enters a new website manually in the address bar, which is commonly exercised as best practice," the security notification posted by Secunia reads.

The security company also mentioned the solution to avoid the exploitation of the vulnerability: close all browser instances after visiting untrusted or dangerous websites. However, you're often encouraged to avoid visiting unknown pages because some of them might try to exploit recently discovered vulnerabilities into the installed applications.

This new report comes after only one week since Internet Explorer and the rival Firefox were involved into a dispute in which they were accusing one another for a new security hole concerning both of them. At that time, Mozilla's official proudly sustained that users should be using Firefox if they want to remain secure while browsing dangerous pages.