A potential buffer overflow security vulnerability in
Microsoft’s Internet Explorer 6 browser has been reported by
internet security researchers.
The bug could be exploited by remote hackers if users can be
directed to a malicious web page. The bug could lead to attackers
being able to run arbitrary code on the machines of affected
users.
Internet security company Secunia has confirmed the
vulnerability. Microsoft said it is investigating the reported bug
and will consider issuing a patch for the potential problem.
No exploits of the bug in the wild, so far have so far been
reported. Microsoft this week issued an improved beta 2 version of
its forthcoming Internet Explorer 7 browser, which is expected to
become available later this year.
Internet Explorer 7 will have improved security and
functionality features, to enable it to fully take on up-and-coming
open-source browser rival Firefox, which now has around 10% of the
browser market.