Blog's from the Bush
The ramblings of a lost technocrat...

IE Vulnerability still not patched! - oh and it's confirmed affects IE 5 & 6 as well

| No TrackBacks | Bookmark and Share

Well it's now a week since we got news of another massive security hole in Microsofts Internet Explorer and the only thing that MS have done is confirm that it's worse than originally believed.

TechNet Security

[From Microsoft Security Advisory (961051): Vulnerability in Internet Explorer Could Allow Remote Code Execution]

Apart from the fact that it's a zero-day exploit and it's being actively exploited the latest update to Microsoft's Security Advisory is that it definitely affects older version of IE going all the way back to IE5 not just IE7 and the still in Beta IE8.

The interesting thing is that the newest browsers from Microsoft is vulnerable to the same exploit as some of it's oldest - surely they will learn that you have to cut the cord to the past some time... oh wait can you say Vista drivers...

In more bad news for Microsoft, TrendLabs is reporting that the exploit is now being used for mass sql injections - oh the humanity when will it end?

Of course they're already probably feeling the pain as pundits and press from around the world recommend dumping IE for any other browser until the problem is fixed (apparently @ 10am PST).

So kiddies go tell your IT Manager that you're worried about suffering and zero-day exploit and would really feel more comfortable with a secure, standards compliant browser like FireFox or Safari or even Lynx (if you're into that sort of text only thing). Of course, afterwards, there is no real reason to go back to IE is there?

No TrackBacks

TrackBack URL: http://www.lensenergy.com/cgi-bin/mt/mt-tb.cgi/108

About the Author

 I've been described as a lost technocrat or a wondering luddite, personally I just like everything that takes us forward.


As the principal of CPPL I try to deliver OSS web solutions to our clients and Cocoa platform software for end-users and businesses alike. Oh, and we enjoy writing IOS software for the iPhone & iPad.

Pages

Powered by Movable Type 4.33-en

About this Entry

This page contains a single entry by craig published on December 17, 2008 12:41 PM.

Find recent content on the main index or look in the archives to find all content.