Microsoft investigates IE 6 flaw

A newly discovered threat might be used for 'drive-by' downloads

Microsoft is investigating a flaw in Internet Explorer 6, according to a posting on the software maker's Security Response Center blog.

The ADODB.Connection ActiveX control in Internet Explorer 6.x may contain a vulnerability that can cause memory corruption, and therefore crash the browser.

It is possible this new threat, considered by Microsoft to be a low risk, could be used by criminal hackers for so-called "drive-by" downloads. This vulnerability has been assigned a National Vulnerability Database number of CVE-2006-5559. For instructions on disabling ActiveX, see this US-CERT document.

Related Links:

• Go back to category Internet & Networks to read more reviews and articles.
• Go back to Software Magazine's main page.