Code to exploit VML vulnerability

Just hours after Microsoft released its January security bulletin, security firm Immunity has released code to exploit the VML vulnerability, partially patched in this newsletter.

The VML vulnerability (MS07-004) affects Windows 2000 and Windows XP machines running Internet Explorer 5.01, 6.0, and 7. The vulnerability of the day is similar to a discovered vulnerability and corrects errors in security bulletin September 2005 secret of Microsoft.

Some researchers have classified the VML vulnerability as the most serious because it has an external exploit code, and recommends that users and businesses need to patch this vulnerability quickly.

VML vulnerabilities may allow hackers to take over user computers. All the hackers need to do is entice users to access a "malicious" site to control the system.