Wednesday, October 18, 2017
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Samsung Unifies IoT Services Under SmartThings, Announces Bixby 2.0, AR Capabilities to Galaxy smartphones, a 360 Round Camera
HP Launches the Powerful ZBook X2 Detachable PC
Motorola Unveils Smart Speaker with Amazon Alexa For Moto Z Phones
Apple and GE Partner to bring Industrial Apps to iPhone and iPad
ICDM to Establish New Display Evaluation Standards Based on Samsung and LG Proposals
Globalfoundries and Intel to Talk About 10, 7nm at IEDM
Intel and Mobileye Offer Present Algorithms to Prove the Safety of Autonomous Vehicles
Chinese BOE and CSOT to Invest in Japanese JOLED, Adding Pressure to South Korean Rivals
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Microso...
Last 7 Days News : SU MO TU WE TH FR SA All News

Tuesday, November 24, 2009
Microsoft Confirms Zero-Day Exploit For Internet Explorer


A new exploit targeting Internet Explorer was announced by Microsoft yesterday, and Microsoft has released an advisory with information and workarounds.

According to Microsoft's investigation so far, Internet Explorer 5.01 Service Pack 4 and Internet Explorer 8 on all supported versions of Microsoft Windows are not affected, and that Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6 and Internet Explorer 7 on supported editions of Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 are affected.

The vulnerability exists as an invalid pointer reference of Internet Explorer. It is possible under certain conditions for a CSS/Style object to be accessed after the object is deleted. In a specially-crafted attack, Internet Explorer attempting to access a freed object can lead to running attacker-supplied code.

Security firm Symantec has also confirmed that it affects Internet Explorer versions 6 and 7.

"The exploit currently exhibits signs of poor reliability, but we expect that a fully-functional reliable exploit will be available in the near future. When this happens, attackers will have the ability to insert the exploit into Web sites, infecting potential visitors. For an attacker to launch a successful attack, they must lure victims to their malicious Web page or a Web site they have compromised. In both cases, the attack requires JavaScript to exploit Internet Explorer," Symantec said.

The security firm suggests Internet Explorer users to ensure their antivirus definitions are up to date, disable JavaScript and only visit Web sites they trust until fixes are available from Microsoft.

On completion of Microsoft's investigation, the conmpany may include providing a solution through its monthly security update release process, or an out-of-cycle security update.


Previous
Next
Samsung Announces Special Prices For HDTVs        All News        Lite-On Releases New LabelTag Drive
Google Bought Display Ad Startup Teracent     General Computing News      Opera Unite Now Available in Opera 10.10

Get RSS feed Easy Print E-Mail this Message

Related News
Microsoft to Buy Wind Energy From GE's new Wind Farm in Ireland
Microsoft Brings the Edge Browser to iOS and Android
Microsoft Announces First Windows S Devices, Brings cloud, AI and Mixed Reality to Businesses
Windows Creators Update Available in October
Microsoft Surface Devices Fail on Reliability
Microsoft Coco Framework Improves Performance and Governance Characteristics of Enterprise Blockchain Networks
New Microsoft keyboard brings Windows Hello to Windows 10 PCs
Microsoft pays up to $250,000 for Windows 10 bugs
Microsoft Paint isn't Dead Yet
Microsoft Reports Strong Profit on Cloud Demand
Microsoft to Bring Fast Internet to Rural Areas in the U.S.
Microsoft Azure Stack Now Available From Dell EMC, HPE, and Lenovo

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2017 - All rights reserved -
Privacy policy - Contact Us .