Important Internet Explorer Security Alert

A flaw in Internet Explorer 6 and 7 has been discovered that allows attackers to crash the browser and silently inject malware through the loophole.

The vulnerability, a dangling pointer in mshtml.dll, can be exploited by web sites using malicious JavaScript code. Several underground websites have already discovered the flaw, and confirmed that they can exploit it; more dangerous web sites are more than likely to appear in the near future.

Symantec has tested the vulnerability and confirmed that it is a problem affecting Internet Explorer 6, and possibly Internet Explorer 7. Internet Explorer 8 appears to be in the clear.

Anyone still using IE6 or IE7 is advised to upgrade to IE8 as soon as possible.