Microsoft today announced that it will issue an emergency security update for Internet Explorer (IE), but postponed setting a ship date for the fix until tomorrow.
"Given the significant level of attention this issue has generated, confusion about what customers can do to protect themselves and the escalating threat environment, Microsoft will release a security update out-of-band for this vulnerability," said George Stathakopoulos…in an entry on the Microsoft Security Response Center blog. … Researchers have been busy building exploits since the original attack code went public last
Thursday. Today, for example, a noted American vulnerability researcher and a French security company disclosed that they had created exploits that worked on the newer IE7 and IE8, and could bypass the DEP (data execution prevention) protection that Microsoft has been touting since it acknowledged the bug.
As he did over the weekend, Stathakopoulos downplayed the threat again today. "We continue to see very limited, and in some cases, targeted attacks," he said, adding that th eonly successful attacks found thus far have aimed at IE6.
#1. "RE: Microsoft promises emergency IE patch" In response to DJC (Reply # 0)
Interesting. (And everyone was thinking they got off easy this month with only 1 patch.)
What is Google doing running IE *6* on their computers? You would think they'd have Google OS (Linux like?) & Chrome. And have a policy that employees can't be surfing porn on company computers .
(From the little I've read, 6 seems an easier target the 7 or 8.)
(I only know that cause I specifically opened IE to check.)
"An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights."
Fine & dandy, but most everyone runs with Admin rights (less so in Vista/W7).
-------------------------------------- BANK OF AMERICA.COM ONLINE BANKING SUCKS IN THE HUGEST WAY IMAGINABLE
Newegg.com's new image gallery layout sucks in the hugest way imaginable too ! And now they're using JavaScript to "turn" pages to boot ! SUCKS