Microsoft may have to rush with an emergency patch ahead of their scheduled (December 8th) update for Internet Explorer browsers, following an attack code posted by a hacker that has the ability to break into a PC running older versions of Microsoft Internet Explorer.

internet-explorer-logoThe code, that was posted to the BugTraq mailing list on Friday has been reviewed by Vupen Security and is confirmed to have the ability to let the hacker install unauthorized software on the hacked computer. Symantec mentioned on its website, “Symantec has conducted further tests and confirmed that it affects Internet Explorer versions 6 and 7 and we expect that a fully-functional reliable exploit will be available in the near future.”

The attack code is known to have worked on a Windows XP Service Pack 3 system running IE 6 or IE 7; however no one has been able to confirm if the attack works on Microsoft’s latest browser, IE 8. Symantec mentioned, “To minimize the chances of being affected by this issue, Internet Explorer users should ensure their antivirus definitions are up to date, disable JavaScript and only visit Web sites they trust until fixes are available from Microsoft,”