Microsoft acknowledged a new unpatched vulnerability in Internet Explorer 6 and 7, and said that the company is investigating methods for fixing the flaw. The vulnerability affects IE6 and IE7 running on Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008. Microsoft also said that running IE7 in Protected Mode, which limits some of its functionality, on Windows Vista, mitigates some of the effects of the vulnerability. The next monthly patch release from Microsoft is due Dec. 8.
Source: https://threatpost.com/microsoft-reconoce-falla-en-ie-7-112409/73159/