Major Internet Explorer Security Alert

[Nimrod]

Users of the world's most common web browser have been advised to switch to another browser until a serious security flaw has been fixed.

The flaw in Microsoft's Internet Explorer could allow criminals to take control of people's computers and steal their passwords, internet experts say. Microsoft is investigating the problem and preparing an emergency software patch to resolve it, it says.
Internet Explorer is used by the vast majority of the world's computer users. "Microsoft is continuing its investigation of public reports of attacks against a new vulnerability in Internet Explorer," said the firm in a security advisory alert about the flaw.

Microsoft says it has detected attacks against version seven of the browser - its most widely used edition. But the company warned that other versions were also potentially vulnerable.

Luckily most Digiex uses are into technology and already know the dangers and problems with Internet Explorer so should be unaffected, but family and friends may be affected.

 

[wagner]

Haha i use Explorer....Lets see if i feel lucky?

 

[Trebor]

I use IE for web browsing at lunch time at work but I doubt they'll be able to hack me then. At home it's Firefox all the way for me Maybe this is a ploy by Mozilla to get IE users to try out other browsers

 

[Safinn]

I'll just move to firefox until they sort it out. You dont have to uninstall it do you?

 

[Simgee]

already changed to firefox. why bother worrying about IE when it takes 2 seconds to switch. and im already enjoying it more than IE. woot

 

[mattyd38]

surprise surprise, microsoft software is vulnerable.

im glad it finally made the news, microsoft products have been vulnerable for a very long time...

sad sad

 

[InsaneNutter]

I’ll take my chances, having used IE for as long as I can remember and not getting my pc taken over by evil internet hackers I’m not really worried at all.

Flaws in Microsoft products always get massively over hyped.

 

[Nimrod]

Flaws in any of the major web browsers which lead to such a dangerous attack get massive press coverage - not just Internet Explorer. This is just a major case because it gives full access to a PC by the web browser running executable code on the targets computer. It doesnt require users clicking a prompt or anything, just a harmless site that gets the code injected into it.

If this didn't get press coverage I would be concerned. Also Love IE or not its honestly best not to use it until a patch is made. No ones commented on if IE's protected mode on Vista protects against this which I am interested in.

In the mean time, its widely recommended people use an alternative until its solved. Give Firefox ago, you may find your prefer it more after use


Digiex Browser Usage past 30 days (16/11/2008-16/12/2008)

 

[InsaneNutter]

Depending on your os and IE version here are some things you can do to safeguard against this: How to Safeguard Against New IE Vulnerability - Lab Notes by ExtremeTech

 

[Kitarii]

surprise surprise, microsoft software is vulnerable.

im glad it finally made the news, microsoft products have been vulnerable for a very long time...

sad sad

Yeah it's about chuffing time.
I'm really surprised to read that any of you are using IE still.
I thought you would know better...

 

[InsaneNutter]

Panic over, a patch will be released on Windows Update in a few hours.

Microsoft Corp. announced today that it will issue an emergency patch tomorrow to quash a critical Internet Explorer bug that attackers have been exploiting for more than a week.

The advance warning came less than a week after Microsoft acknowledged that exploit code had gone public and was being used by hackers to hijack Windows PCs running IE.

Microsoft will deliver the out-of-cycle patch Wednesday at 1 p.m. Eastern time via its normal update mechanisms, including Windows Update, Microsoft Update and Windows Server Update Services (WSUS).

The update will be pegged "critical," the most serious ranking in Microsoft's four-step scoring system. Microsoft will provide patches to users of Windows 2000, XP, Vista, Server 2003 and Server 2008 for IE5.01, IE6 and IE7. A separate patch will apparently be issued tomorrow for IE8 Beta 2, a preview version of Microsoft's next browser that is not officially on the support list.

Source

Edit - Patch is on Windows Update.

 

[Icharus_Falling]

they should release a patch that changes IE to firefox. =D

it would be in everyone's best interest

 

[Safinn]

The patch is out I believe but do you need to download it? I cannot find a download or anything or is it already set up?

 

[MikkelPixel]

yea does any1 where to download it

 

[InsaneNutter]

Yes just look on Windows update

 

[Safinn]

Yes just look on Windows update

Oh yea! I knew that but just forgot.. How stupid.. Thanks

 

[wagner]

Mmm Firefox is better....I just swapped