Microsoft has just released a Security Advisory for the vulnerability in the way HTML Objects. This is the reason the Internet Storm Center went to yellow this evening.
From the Microsoft advisory:
"Microsoft has confirmed new public reports of a vulnerability in Microsoft Internet Explorer. Based on our investigation, this vulnerability could allow an attacker to execute arbitrary code on the user's system in the security context of the logged-on user. We have seen examples of proof of concept code but we are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time."
Microsoft Suggested Workarounds:
Microsoft says that they are still investigating and will provide more information as it becomes available. So stay tuned for further updates.
Mar 24th 2006
1 decade ago