New attacks leverage unpatched IE flaw, Microsoft warns

12.03.2011
Due to a reporting error, the story, "New attacks leverage unpatched IE flaw, Microsoft warns," published Friday confused two similar Windows flaws, both of which were disclosed in January, by two different parties. The bug being used in the new attacks was disclosed anonymously on the Full Disclosure mailing list. The story has been corrected on the wire.

The second headline now reads:

The bug was disclosed in January, but it's now being used in targeted attacks

The first paragraph has been changed to read:

An Internet Explorer flaw made public two months ago is now being used in online attacks.

The fifth paragraph reads: