Microsoft said it is investigating a report of a new potentially critical flaw discovered in Internet Explorer by security researcher Tom Ferris. The problem affects fully patched Windows XP SP2 systems running IE6, and could lead to remote code executation. Ferris, who has been credited by Microsoft as finding a security vulnerability in the Remote Desktop Protocol, says he reported the issue to Microsoft on August 14. Ferris is not sharing any specifics of the flaw in order to keep users safe while Microsoft develops a patch, but he has posted a screenshot of IE crashing from the bug. Source: BetaNews
