IE7 Security Flaw Being Actively Exploited

Trend Micro warned this week that a critical vulnerability in Internet Explorer 7 is being actively exploited across the Web. The flaw stems from the way IE7 handles errors when attempting to access objects that have been deleted. Remote crooks can and have been utilizing specially crafted HTML to run arbitrary code on victims' PCs. When the exploit is successful, a backdoor is downloaded which installs a DLL file capable of stealing a user's sensitive data. This includes sending screenshots of an infected PC to a remote location.

Version of IE7 that have applied last week's patch are safe from this particular vulnerability. However, unpatched systems are at great risk. If you are running IE, make sure that you have installed the latest updates!