IE, Firefox have new flaws

Some new browser bugs turned up this week. Microsoft officials said Internet Explorer's older 5.01 and 5.5 versions can execute malware merely by viewing an infected image and that they're pondering a patch for users who can't or won't upgrade to IE 6.x. Microsoft also confirmed a Windows XP flaw that lets users get unintended administrator rights. Meanwhile, representatives for Firefox/Thunderbird said their 1.5 versions can be infected by a memory corruption, but that the automatic patch system should have covered most users by now.

For more on the exploits:
- read this News.com article
- read this IDG News article