Symantec Says IE Vulnerable to New Exploit

Monday, November 23rd, 2009 at 7:03 am

Internet Explorer users who have yet to upgrade to IE8 should take note. According to security firm Symantec, there's a pretty nasty Zero Day exploit that affects both IE6 and IE7.

"The exploit currently exhibits signs of poor reliability, but we expect that a fully-functional reliable exploit will be available in the near future," Symantec explained in a blog post. "When this happens, attackers will have the abilty to insert the exploit in websites infecting potential visitors."

Symantec said the attack requires JavaScript and recommends that users disable it. The security firm also suggested potentially affected users limit web surfing to only trusted sites until Microsoft releases a fix.