Microsoft said on Wednesday that it is investigating another flaw in Internet Explorer, this time a vulnerability that could result in an unauthorised disclosure of information for users running its browser on older operating systems.
The software maker said in a security advisory that, although it knows of no attacks based on the flaw, the vulnerability could lead to a web-based attack from either a website designed to take advantage of the flaw or from a site that becomes compromised via user-generated text or a malicious ad. Either way, a user would have to actively go to the compromised website.
The flaw is separate from the one used to attack Google and other companies, which Microsoft addressed with an 'out-of-band' security update in January.
For more on this story, see Microsoft investigates new Internet Explorer flaw on CNET News.
Talkback
This browser should have been rebuilt, from the ground up, several years ago. Instead they rely on the same basic engine and make minor changes which are mostly cosmetic, and do little to help the security for the user. Seems like IE itself is one big flaw. But, it does go with the operating system well.