Critical Internet Explorer Flaw Patched by TP

[JMac]

While Microsoft works on a patch for a critical Internet Explorer 6 script vulnerability that can allow a hacker to take control of a Windows PC, another firm has beaten Microsoft to the punch, releasing its own fix for the problem.

The new patch from eEye Digital Security is not meant to replace the forthcoming Microsoft patch, but it does provide immediate protection in lieu of an available fix. It is designed to remove itself automatically when Microsoft's official patch becomes available.

Microsoft's official update might not be released until next month, according to a blog posting on the company's security site.

eEye Zero-Day IE Exploit Page

("eEye has engineered the patch to automatically remove itself when Microsoft’s official patch comes through.”)

"Browsers are so complex now that there are more bases to cover," said Forrester analyst Paul Stamp. "And because Microsoft went years before taking a proactive approach to Explorer bugs, there will be more flaws cropping up."