In order to fix a new security flaw discovered in Microsoft’s Internet Explorer, the company released a critical security patch on Wednesday. This patch is supposed to prevent attackers from downloading malware onto users’ computers.
A serious security vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 was discovered few days back, which allows remote attackers to execute arbitrary code via a crafted XML document containing nested SPAN elements, as exploited in the wild in December 2008.
Microsoft has released a Security Update for Internet Explorer (960714) which resolves the vulnerability. This security update is rated Critical for Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, and Internet Explorer 7.
You may install the update via Automatic Updates, Windows Update or download the update from Microsoft Download Center.