Microsoft yesterday had released a security advisory (KB980088) describing a publicly known vulnerability in Internet Explorer. This vulnerability could allow attacker to read files from a user computer when he/she visits a malicious web site. Windows XP users or users who had disabled IE protected mode for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 are affected by this vulnerability.
The vulnerable MS IE are:
Internet Explorer 5.01 Service Pack 4 on Microsoft Windows 2000 Service 4
Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4
Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 on supported editions of:-
a. Windows XP Service Pack 2 b. Windows XP Service Pack 3, and c. Windows Server 2003 Service Pack 2
Microsoft will be releasing the patch for this vulnerability soon. It is advisable to set the Internet and Local Intranet security zone settings to "High", not to visit suspicious sites, and follow "Protect Your Computer" guidelines as suggested by Microsoft.
For a more detail description and workarounds, kindly visit MicrosoftTechnet site at:
Garis panduan ini hendaklah dibaca bersama pekeliling kerajaan berkaitan ICT yang akan menggantikan apa-apa kekurangan yang terdapat dalam garis paduan ICT UiTM. Sila rujuk link pekeliling ICT berikut :