New Outlook and IE bugs

VNUNet reported Two high risk flaws in Microsoft's Internet Explorer and Outlook have been reported by security vulnerability specialists eEye Digital Security.

The security holes could let an attacker take over a system with 'minimal user interaction', the company said in two security alerts posted on its web site.

The software holes affect the default installations of Internet Explorer and Outlook running on Windows NT 4.0, Windows 2000, Windows XP or Windows Server 2003....

Depending on the severity of the flaw, Microsoft will issue a fix through a service pack, one of the company's monthly patches or and out-of-cycle security update.

Microsoft usually distributes fixes through its monthly patches on the second Tuesday of the month. The company will release an out-of-cycle update in case of an emergency.

This has happened three times since it adopted the monthly patching cycle in October 2003. All three patches targeted critical flaws in Internet Explorer.

This reminds me of the item from a few days ago, Mozilla Bug Bounty