Eclectic Echoes

More vulnerabilities in IE—at least from version 5.01–6.0. From the CERT announcement:

Multiple Vulnerabilities in Microsoft Internet Explorer

   Original issue date: February 02, 2004
   Last revised: --
   Source: US-CERT

Systems Affected

   Microsoft Windows systems running

     * Internet Explorer 5.01
     * Internet Explorer 5.50
     * Internet Explorer 6

   Previous, unsupported, versions of Internet Explorer may also be
   affected.

Overview

   Microsoft Internet Explorer (IE) contains multiple vulnerabilities,
   the most serious of which could allow a remote attacker to execute
   arbitrary code with the privileges of the user running IE.

The good news is Microsoft has downloads available to patch the security holes. The bad news is one of the patches will break the ability for IE users to access some sites if the site uses authentication in the form username:password@www.example.com as the URL.

For a better patch I suggest getting a new browser such as Firebird.