Microsoft released a “Fix It” addressing a zero-day vulnerability in older versions of Internet Explorer that was used to compromise visitors to the Council on Foreign Relations website last month. The zero-day vulnerability is related to how IE accesses “an object n memory that has been deleted or has not been properly allocated,” Microsoft said in a security advisory on Dec. 29. The issue is present in Internet Explorer 6, 7, and 8. The newer IE 9 and 10 are not affected. The “Fix It” is not a permanent patch, but just a temporary mechanism that can be used to protect users until the full security update is ready. Microsoft has not disclosed whether the update will be ready for January’s Patch Tuesday, scheduled for Jan. 8. “At this point, it is highly recommended to apply the Fix it if you can’t upgrade to Internet Explorer 9 or 10 or if you haven’t already applied one of the workarounds,” SANS Technology Institute’s Johannes Ullrich wrote on the Internet Storm Center blog. Drive By Download Attacks This security flaw is particularly dangerous because attackers can exploit it in a drive-by download attack. Victims visiting the booby-trapped website will be infected without… Read full this story
- Windows zero-days don't usually work against the latest OS version
- Google engineer publicizes Windows zero-day bug, claims Microsoft is 'difficult to work with'
- Microsoft Xbox 360 Review
- TikTok fixes security flaws that could have let hackers manipulate accounts, access personal data
- Potent Firefox 0-day used to install undetected backdoors on Macs
- Microsoft’s recent success in blocking in-the-wild attacks is eerily good
- If You Use The Mozilla Firefox Browser, Stop Everything And Update it Right Now
- Microsoft Surface Tablet Review and Giveaway
- Google Project Zero shifts to full 90-day disclosures to improve patch uptake
- Are Spectre and Meltdown Still a Threat? The Patches You Need
Microsoft Issues Fix-It for IE Zero-Day have 294 words, post on in.pcmag.com at January 2, 2013. This is cached page on Vietnam Art News. If you want remove this page, please contact us.