For every question, there's an answer -- and you'll find it here!


Printer-friendly copy
Top The PC Q&A Forum The Computer Forum topic #515798
View in linear mode

Subject: " Microsoft promises emergency IE patch" Previous topic | Next topic
DJCWed Jan-20-10 03:20 PM
Charter member
6596 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
" Microsoft promises emergency IE patch"


  

          

http://www.computerworld.com/s/article/9146038/Microsoft_promises_emergency_IE_patch

Microsoft promises emergency IE patch

VULNERABILITIES

Microsoft today announced that it will issue an emergency security update for Internet Explorer (IE), but postponed setting a ship date for the fix until tomorrow.

"Given the significant level of attention this issue has generated, confusion about what customers can do to protect themselves and the escalating threat environment, Microsoft will release a security update out-of-band for this vulnerability," said George Stathakopoulos…in an entry on the Microsoft Security Response Center blog. … Researchers have been busy building exploits since the original attack code went public last

Thursday. Today, for example, a noted American vulnerability researcher and a French security company disclosed that they had created exploits that worked on the newer IE7 and IE8, and could bypass the DEP (data execution prevention) protection that Microsoft has been touting since it acknowledged the bug.

As he did over the weekend, Stathakopoulos downplayed the threat again today. "We continue to see very limited, and in some cases, targeted attacks," he said, adding that th eonly successful attacks found thus far have aimed at IE6.

Date: 19 January 2010

  

Alert Printer-friendly copy | | Top

Replies to this topic
Subject Author Message Date ID
RE: Microsoft promises emergency IE patch
Jan 20th 2010
1
RE: Microsoft promises emergency IE patch
Jan 21st 2010
2
      RE: Microsoft promises emergency IE patch
Jan 21st 2010
3
           RE: Microsoft promises emergency IE patch
Jan 22nd 2010
4
                RE: Microsoft promises emergency IE patch
Jan 22nd 2010
5
                     RE: Microsoft promises emergency IE patch
Jan 23rd 2010
6

therubeWed Jan-20-10 07:06 PM
Member since Jan 22nd 2003
16604 posts
Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#1. "RE: Microsoft promises emergency IE patch"
In response to DJC (Reply # 0)


  

          

Interesting. (And everyone was thinking they got off easy this month with only 1 patch.)

What is Google doing running IE *6* on their computers?
You would think they'd have Google OS (Linux like?) & Chrome. And have a policy that employees can't be surfing porn on company computers .

(From the little I've read, 6 seems an easier target the 7 or 8.)


"Microsoft Security Advisory (979352)
Vulnerability in Internet Explorer Could Allow Remote Code Execution"
http://www.microsoft.com/technet/security/advisory/979352.mspx

Says DEP can help mitigate it in XP SP3.

How do you know if DEP is enabled (for IE too)?

"Tip: Do you have DEP stopping the new IE exploit?"
http://www.guardian.co.uk/technology/askjack/2010/jan/19/dep-windows-security

iexplore.exe DEP (permanent)

(I only know that cause I specifically opened IE to check.)

"An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights."

Fine & dandy, but most everyone runs with Admin rights (less so in Vista/W7).

--------------------------------------
BANK OF AMERICA.COM ONLINE BANKING SUCKS IN THE HUGEST WAY IMAGINABLE

Newegg.com's new image gallery layout sucks in the hugest way imaginable too !
And now they're using JavaScript to "turn" pages to boot ! SUCKS

  

Alert Printer-friendly copy | | Top

    
DJCThu Jan-21-10 11:17 PM
Charter member
6596 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#2. "RE: Microsoft promises emergency IE patch"
In response to therube (Reply # 1)


  

          

The patch as promised if you have not updated I would recommend that you do.

  

Alert Printer-friendly copy | | Top

        
therubeThu Jan-21-10 11:52 PM
Member since Jan 22nd 2003
16604 posts
Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#3. "RE: Microsoft promises emergency IE patch"
In response to DJC (Reply # 2)


  

          

Automatic Updates delivered it & after a reboot, done .

--------------------------------------
BANK OF AMERICA.COM ONLINE BANKING SUCKS IN THE HUGEST WAY IMAGINABLE

Newegg.com's new image gallery layout sucks in the hugest way imaginable too !
And now they're using JavaScript to "turn" pages to boot ! SUCKS

  

Alert Printer-friendly copy | | Top

            
ShellyFri Jan-22-10 08:19 PM
Charter member
58338 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#4. "RE: Microsoft promises emergency IE patch"
In response to therube (Reply # 3)


  

          

I got the update for my XP machine in my office overnight, my W7 machine at home had not received it as of the time I left for work this morning.

Shelly

  

Alert Printer-friendly copy | | Top

                
Zeke36Fri Jan-22-10 10:52 PM
Member since Dec 05th 2007
1787 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#5. "RE: Microsoft promises emergency IE patch"
In response to Shelly (Reply # 4)


          

I got all my updates today. About 7MB for W7 and 9MB for XP.

*****************
_z36

  

Alert Printer-friendly copy | | Top

                    
ShellySat Jan-23-10 08:01 PM
Charter member
58338 posts
Click to send email to this author Click to send private message to this authorClick to view this author's profileClick to add this author to your buddy list
#6. "RE: Microsoft promises emergency IE patch"
In response to Zeke36 (Reply # 5)


  

          

I got the W7 update too, didn't even require a reboot like the XP one did.

Shelly

  

Alert Printer-friendly copy | | Top

Top The PC Q&A Forum The Computer Forum topic #515798 Previous topic | Next topic
Powered by DCForum+ Version 1.27
Copyright 1997-2003 DCScripts.com
Home
Links
About PCQandA
Link To Us
Support PCQandA
Privacy Policy
In Memoriam
Acceptable Use Policy

Have a question or problem regarding this forum? Check here for the answer.