Microsoft Advisory: Vulnerability in IE

Microsoft is investigating reports of limited, targeted attacks against customers of Internet Explorer 6, using a vulnerability in Internet Explorer. This advisory contains information about which versions of Internet Explorer are vulnerable as well as workarounds and mitigations for this issue.

Our investigation so far has shown that Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service Pack 4 is not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are vulnerable.

via Microsoft Security Advisory (979352): Vulnerability in Internet Explorer Could Allow Remote Code Execution.

Related posts:

1. New IE 6 & 7 Security Advisory
2. Microsoft Security Advisory: Excel
3. Microsoft Advisory: Vulnerability in Internet Explorer Could Allow Remote Code Execution
4. Microsoft: Vulnerability Could Allow Elevation of Privilege
5. NEW MS Security Bulletin!