New IE Flaw Discovered. Rating "Extremely Critical"

[sarcle]

Microsoft has confirmed that a new vulnerability exists in its Internet Explorer Web browser. The flaw could allow an attacker to execute arbitrary code on a user's system.

The vulnerability affects IE 6.0 and Microsoft Windows XP Service Pack 2. Secunia has also confirmed the vulnerability exists in the January edition of IE7 Beta 2 Preview. Consumers who use the IE 7 Beta 2 Preview that was released on March 20 are not affected, Microsoft said.

The security world is waiting to learn whether or not Microsoft will release an out-of-cycle patch for this flaw, which is rated as extremely critical. Analysts, however, do not expect a patch until at least the first Tuesday in April. It may even be longer.

With the widespread use of radio buttons on the Web, analysts said the number of Web sites at which this vulnerability could be exploited is large. StillSecure expects to see additional exploits identified in the coming weeks.
Since disabling scripting causes other issues and is difficult for end users to do on their own, Ashley said one of the easiest ways to mitigate the risk is to use an alternate browser.

http://www.ecommercetimes.com/story/...Quandary.xhtml