At that specializes in security issues in the Bugtraq mailing list last Friday appeared in the entry titled "IE7, which contains only a few lines of HTML without comment. Meanwhile, many security experts confirmed that the code reveals previously unknown vulnerability in Internet Explorer.

Do not know who hides behind the pseudonym "securitylab.ir" - appears he has since April 2009 in various communications and security exploits.

Concern

Everything indicates that the error occurs when the javascript method call. Given, however, that the defect was located in the library mshtml.dll Microsoft's, one should not expect its presence in other browsers.

Solution

There is no solution.

Workaround

Explora Internet users can protect themselves by disabling the browser's settings ActiveScripiting in the Internet zone. As a result, however, many Web pages may not function properly.

Threat

In the first tests conducted Security Internet Explorer when the HTML page views succumbed to failure. Operating in the security industry, Symantec confirmed that the working set Zero Day exploit causing no danger to the user data, but expects to issue shortly a more stable code, which then will be a real danger.

French company VUPEN managed to reconstruct the security problem in Internet Explorer 6 and 7 running on Windows XP SP3. The company warns that the attackers can use it to smuggle in your own code and malicious script to infect a system. For now, Microsoft has no position on this issue.