Wednesday, December 17th 2008
Microsoft Acts on MSIE RCE Vulnerability, Issues Hotfix
A major security remote code execution (RCE) vulnerability discovered in the Microsoft Internet Explorer set data security agencies on high alert. Microsoft noted that 1 in every 500 internet users were exposed to the vulnerability through unsafe websites. The exploit allows hackers to remotely execute code over an IE session to gain access to, and comprimise a machine.
In a security advisory updated today, Microsoft claims to have acted on the vulnerability by issuing a critical security update MS08-078 that went online at 1:00 PM, EST. The hotfix is available for all current versions of the web browser through Microsoft Update.
In a security advisory updated today, Microsoft claims to have acted on the vulnerability by issuing a critical security update MS08-078 that went online at 1:00 PM, EST. The hotfix is available for all current versions of the web browser through Microsoft Update.
23 Comments on Microsoft Acts on MSIE RCE Vulnerability, Issues Hotfix
Would this be a good suggestion to do since I don't even use IE?
For example, it could be that only 1:10 use credit cards on their PC. Does that mean:
- For those that use CC, the risk is 1:50?
- And for those that dont, the risk is zero?
(Just an example)Earlier today it warning was for IE7. It seems that it is for all IE, since my update is now offering the following:
It's unusual there is no much noise about a security update. It must be serious.
EVERYONE do the update!
Thanks have been added bta!
Im not saying that anyone that Internet Banks deserves to have all their assets relocated to some foreign country and used for prostitution, i dont know what im saying . . . I think im saying, DONT INTERNET BANK.
As for the unsafe websites, who said you should click on it . . . . Almost all of my clients admit to having gone to an unsafe website where they obtained a bug or two. They all knew it was unsafe, they all subconciously knew they would be harmed, yet they clicked. I try to educate my clients as much as i can. . . That one must guard him/herself and not await 3rd party software to do it for them.
The hotfix is more then welcomed. Educating the public is needed.
I dont use InternetSuxxplorer (and I never did)
Opera - Firefox - Chrome This 3 browsers are much better than all Trident based crap