not even a month has passed since the appearance of the last critical vulnerability in Windows , and we have another that the guys at Microsoft have to face.
This time it affects all Windows systems , and is produced by an engine failure MHTML, a format that allows you to save complete web pages in a single file. Properly prepared with a link, an attacker could run a script that would work throughout the session of Internet Explorer. Thus, it could capture web pages we visit and see our personal information .
There is already a functional proof of concept through the network, but not yet is exploiting this vulnerability . In Microsoft have acted promptly and, although there is no patch available, they have released an interim patch to disable support for MHTML files .