Microsoft patches Internet Explorer

By Alun Williams

Posted on 5 Jun 2003 at 12:59

Microsoft has released Security Bulletin MS03-020, concerning security issues with its Internet Explorer.

With a 'Severity Rating of 'critical', the update relates to IE 5.1, 5.5 and 6.0. It is a cumulative patch that includes all previously released fixes for these versions, but it also addresses two new vulnerabilities.

First, a buffer overrun issue - involving objects returned by a Web server - enables an attacker to potentially execute code on your system if you visited their Web site. HTML email can also be crafted to exploit the gap in security.

Second, a problem has been discovered with the file download dialog box, with IE not fully checking the process. Again, arbitrary code could be run on your system if an attacker exploits the vulnerability.

Note that the vulnerabilities affect computers with Microsoft Internet Explorer installed - you do not have to be using Internet Explorer as your Web browser to be affected by the issues.

The patch and more information can be found at Microsoft Security & Privacy.