Threatens all versions of Microsoft's browser.
The security industry is working on blast to investigate what happened when Google and several other utilities were subjected to a targeted cyber attack.
The attack said Google intended to reveal the email to Chinese human rights activists in several parts of the world.
Google sees a link between hacker burglary and Chinese authorities' censorship, and responded to terminate relationships with them to censor the search engine in China. At the same time they threaten to withdraw completely from the country.
IT security company McAfee is among the players who have participated actively in the investigation of the attacks. They have gained access to the malware used by hackers.
A hitherto not publicly known vulnerability in all versions of the browser Internet Explorer (IE) from Microsoft was exploited by hackers.
The McAfee writes in a blog post Thursday.
- Our investigation shows that Internet Explorer is vulnerable to this hole in all versions and Microsoft's newer operating systems, including Windows 7, but so far we have only seen the hole exploited in IE6.
Microsoft has worked with McAfee about the discovery, and confirms that the vulnerability threatens most of the company's newer products in this message.
At the same time notify the company that they work with a security fix that closes the vulnerability.
Cocktail of malware
McAfee writes further that the IE vulnerability, probably only one of several attack vectors that hackers have used. - It is not uncommon for such attacks using a "cocktail" of methods to exploit various weaknesses in the systems they want to break into i.
Operation Aurora
However, they have not found evidence that Google attacked, as they have baptized "Operation Aurora" has exploited vulnerabilities in the PDF files, so other security companies reported.
- "Aurora"-the name was part of the paths of attacking voters' machine. We believe this was the internal name that hackers used for this operation, writes McAfee.
F-Secure and security expert Mikko Hyppönen is among those who claim the attacks were carried out using a false e-mail with the rigs PDF attachments.
- Incredible enough Adobe announced that they were attacked by a targeted attack at the same time as Google, type Hyppönen.
Adobe put out Tuesday a security update for the PDF reader Adobe Reader to close several vulnerabilities.
The investigation continues, and in the future we'll probably find out more detail about what Google itself describes as a very sophisticated cyber attack.
The events have become a diplomatic hot potato, and Thursday called the U.S. Chinese diplomats on the carpet to demand an explanation.