IE 6 again generates a serious security error

Microsoft said it is currently investigating a newly discovered security bug in Internet Explorer 6.

US-CERT and security firm SecurityFocus were the first to disclose error information, but the result belongs to an independent researcher. Information on this security error has also been published on Microsoft Security Response Center Blog.

Accordingly, this security error is generated in the ActiveX Data Objects database control object. However, this is not a complicated security error. The exploit code for this vulnerability written in the JavaScript language contains a series of incorrect syntax to overload the browser ADO connection processing.

US-CERT experts for overloading objects control ADO with a series of SQL statements after the syntax can allow remote attackers to execute malicious code on a user's PC through policy Browse Internet Explorer 6.

No information has yet been said that Internet Explorer 7 has also suffered from this security error.

Hoang Dung