Zero day flaw hits Microsoft's Internet Explorer

Powered by SC Magazine
 

New vulnerability.

Microsoft confirmed this week another zero day security flaw had hit Internet Explorer (IE), affecting all versions of the browser.

In a security advisory released late yesterday, the software giant confirmed a remote code execution vulnerability which was a result of an invalid flag reference in IE.

The issue had already been taken advantage of, as Microsoft admitted to being “aware of targeted attacks.” However, the company has yet to confirm a fix for the problem.

“We will continue to monitor the threat environment and update this advisory if this situation changes,” the advisory said.

“On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.”

The usual advice has been given to customers of ensuring your security software is up to date and to upgrade to the latest version of the browser, IE8.

This article originally appeared at itpro.co.uk

Copyright © ITPro, Dennis Publishing


Zero day flaw hits Microsoft's Internet Explorer
 
 
 
Top Stories
Coalition's NBN cost-benefit study finds in favour of MTM
FTTP costs too much, would take too long.
 
Who'd have picked a BlackBerry for the Internet of Things?
[Blog] BlackBerry has a more secure future in the physical world.
 
Will Nutanix be outflanked before reaching IPO?
VMware muscles in on storage startup in hyper-converged infrastructure.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  69%
 
Advanced persistent threats
  3%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  7%
 
Insider threats
  11%
TOTAL VOTES: 627

Vote