Internet Explorer 7 - release 24 hours ago and 1 vulnerability already detected

Microsoft released their latest Internet Explorer yesterday with so called new security features and functionality.

Less than 24 hours have passed and there is already a vulnerability.

A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site.

Test code is readily available and the threat is marked as less critical.


More info: Secunia Advisory