Microsoft denies reports of first IE7 security flaw

Data disclosure bug affects Outlook, not Internet Explorer

Written by Tom Sanders in California

Microsoft has dismissed reports of a security vulnerability in its Internet Explorer 7 browser as "inaccurate".

Danish security firm Secunia on Thursday claimed that it had discovered a vulnerability in the new version of the Microsoft browser. The firm rated the flaw as "less critical".

An attacker could exploit the vulnerability by luring a user to a specially crafted website. Once that site is accessed, the attacker gains access to any information from other websites that the user is visiting at the same time, including online banking and email services, according to Secunia.

Microsoft did not challenge the fact that the flaw could lead to information disclosure, but denied that it affected the Internet Explorer 7 browser that was released on Wednesday.

"These reports are technically inaccurate, the issue concerned in these reports is not in Internet Explorer 7 (or any other version) at all," Christopher Budd, a security program manager with Microsoft, argued in a posting to the Microsoft Security Response Center Blog.

"Rather, it is in a different Windows component, specifically a component in Outlook Express. While these reports use Internet Explorer as a vector the vulnerability itself is in Outlook Express."

He added that Microsoft isn't aware of any attacks exploiting the Outlook flaw and that the company plans to keep monitoring the situation.

Tags:

Further reading

Related articles

Microsoft patches eight 'critical' holes

August update covers four web browsing risks   More...

Highly critical flaw found in Microsoft Excel

Vulnerability could be exploited to compromise a user's system   More...

Windows 2000 flaw highlights slow Patch Tuesday

Vista and XP spared from most dangerous vulnerabilities   More...

Attackers target Windows DRM flaw

SafeDisc game copyright protection hit   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

22 Jul 2008

3.22 MBSat-nav crashes, open source security and female gamers More...

21 Jul 2008

3.12 MBGlobal internet reach, online spending and the space race More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Security

Major DNS flaw revealed

Experts sound alarms over early disclosure   More...

Nintendo DS

Dodgy Chinese Nintendo chargers recalled

Experience could shock some users   More...

Advertisement

Houses of Parliament

Official 'spying' requests top 500,000

Information includes web records and itemised phone bills   More...

Hacking

Small firms naïve about security

SMBs remain prone to attack, says study   More...

Advertisement