First IE7 Vulnerability Discovered

By Jimmy Daniels
Contributing Writer, RealTechNews

Not even out 24 hours yet and a vulnerability has been posted relating to IE7. This was probably known from the release candidates I bet and just posted today after the official release of IE7, but, still, this makes Microsoft look pretty bad.

A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error in the handling of redirections for URLs with the “mhtml:” URI handler. This can be exploited to access documents served from another web site.

Secunia has constructed a test, which is available at:
http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

Secunia has confirmed the vulnerability on a fully patched system with Internet Explorer 7.0 and Microsoft Windows XP SP2. Other versions may also be affected. Source: Secunia

We Say: It’s posted as being less critical, the current work around is to disable active scripting support.