Microsoft has issued a security bulletin out-of-band (MS10-018) to address the vulnerability in Internet Explorer 6 and 7 that could allow remote code execution. Internet Explorer 8 remains unaffected by the vulnerability addressed in the advisory and we continue to encourage all customers to upgrade to this version to benefit from the improved security protection it offers

Microsoft advised users install the update as soon as it is available. For users using automatic updates,it will be automatically applied once it is released.Additionally, because Security Bulletin MS10-18 is a cumulative update, it will also address nine other vulnerabilities in Internet Explorer that were planned for release on April 13.

For more information about this issue, including download links for an available security update, please review MS10-018.

Updates to this issue will be provided via the Microsoft Security Response Center Blog at