Results 1 to 9 of 9

Thread: News - Microsoft hurries to fix IE remote code execution bug

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    News - Microsoft hurries to fix IE remote code execution bug

    'Zero Day' flaw affects IE6, 7, 8, 9, 10 and 11. Windows XP users to be left in the cold.
    Read more.

  2. #2
    I'm special azrael-'s Avatar
    Join Date
    Jan 2014
    Location
    Aarhus, Denmark
    Posts
    1,074
    Thanks
    67
    Thanked
    113 times in 92 posts
    • azrael-'s system
      • Motherboard:
      • ASUS Prime X470-Pro
      • CPU:
      • AMD Ryzen 7 3800X
      • Memory:
      • 64 GB ECC DDR4 2666 MHz (Samsung M391A2K43BB1-CTD)
      • Storage:
      • 1 TB Samsung 970 EVO Plus, 1 TB Samsung 850 EVO, 12 TB WD HDDs
      • Graphics card(s):
      • eVGA GTX 1080 SC Gaming, 8 GB
      • PSU:
      • Seasonic X-Series 560W
      • Case:
      • Corsair Obsidian 550D
      • Operating System:
      • Windows 10 Pro x64
      • Monitor(s):
      • Acer Predator XB271HU
      • Internet:
      • VDSL 55/12 Mbit/s

    Re: News - Microsoft hurries to fix IE remote code execution bug

    "Microsoft also recommended, in a statement to Reuters, that Windows XP users should upgrade to Windows 7 or 8, as they will receive no system updates to address this vulnerability when they become available."

    Who'd have thought...

  3. #3
    Anthropomorphic Personification shaithis's Avatar
    Join Date
    Apr 2004
    Location
    The Last Aerie
    Posts
    10,857
    Thanks
    645
    Thanked
    872 times in 736 posts
    • shaithis's system
      • Motherboard:
      • Asus P8Z77 WS
      • CPU:
      • i7 3770k @ 4.5GHz
      • Memory:
      • 32GB HyperX 1866
      • Storage:
      • Lots!
      • Graphics card(s):
      • Sapphire Fury X
      • PSU:
      • Corsair HX850
      • Case:
      • Corsair 600T (White)
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • 2 x Dell 3007
      • Internet:
      • Zen 80Mb Fibre

    Re: News - Microsoft hurries to fix IE remote code execution bug

    A big one so soon after Windows XP support ends....ho hum, I think the phrase "Time to upgrade" is going to get used a lot over the coming months.
    Main PC: Asus Rampage IV Extreme / 3960X@4.5GHz / Antec H1200 Pro / 32GB DDR3-1866 Quad Channel / Sapphire Fury X / Areca 1680 / 850W EVGA SuperNOVA Gold 2 / Corsair 600T / 2x Dell 3007 / 4 x 250GB SSD + 2 x 80GB SSD / 4 x 1TB HDD (RAID 10) / Windows 10 Pro, Yosemite & Ubuntu
    HTPC: AsRock Z77 Pro 4 / 3770K@4.2GHz / 24GB / GTX 1080 / SST-LC20 / Antec TP-550 / Hisense 65k5510 4K TV / HTC Vive / 2 x 240GB SSD + 12TB HDD Space / Race Seat / Logitech G29 / Win 10 Pro
    HTPC2: Asus AM1I-A / 5150 / 4GB / Corsair Force 3 240GB / Silverstone SST-ML05B + ST30SF / Samsung UE60H6200 TV / Windows 10 Pro
    Spare/Loaner: Gigabyte EX58-UD5 / i950 / 12GB / HD7870 / Corsair 300R / Silverpower 700W modular
    NAS 1: HP N40L / 12GB ECC RAM / 2 x 3TB Arrays || NAS 2: Dell PowerEdge T110 II / 24GB ECC RAM / 2 x 3TB Hybrid arrays || Network:Buffalo WZR-1166DHP w/DD-WRT + HP ProCurve 1800-24G
    Laptop: Dell Precision 5510 Printer: HP CP1515n || Phone: Huawei P30 || Other: Samsung Galaxy Tab 4 Pro 10.1 CM14 / Playstation 4 + G29 + 2TB Hybrid drive

  4. #4
    Registered+
    Join Date
    Nov 2012
    Posts
    68
    Thanks
    0
    Thanked
    3 times in 3 posts

    Re: News - Microsoft hurries to fix IE remote code execution bug

    Why on earth are people still using IE6?

  5. #5
    Senior Member this_is_gav's Avatar
    Join Date
    Dec 2005
    Posts
    4,854
    Thanks
    175
    Thanked
    255 times in 217 posts

    Re: News - Microsoft hurries to fix IE remote code execution bug

    Quote Originally Posted by MaddogPepper View Post
    Why on earth are people still using IE6?
    In this country proprietary, horribly designed government/council applications which won't work on other browsers no doubt. Of course, newer versions will probably be available, but would require spending money.

  6. #6
    Member
    Join Date
    Jan 2012
    Posts
    154
    Thanks
    0
    Thanked
    7 times in 7 posts

    Re: News - Microsoft hurries to fix IE remote code execution bug

    [...]allow an attacker to execute arbitrary code in the context of the current user[...]
    Time to take the plunge and start user accounts that don't have Admin rights for your daily use, people! It's a lot easier than you think, once you get the hang of it.

  7. #7
    Registered+
    Join Date
    Apr 2014
    Posts
    21
    Thanks
    0
    Thanked
    1 time in 1 post

    Re: News - Microsoft hurries to fix IE remote code execution bug

    Quote Originally Posted by MaddogPepper View Post
    Why on earth are people still using IE6?
    I had to use it at my old work and it made my cry every day.

  8. #8
    Senior Member
    Join Date
    Mar 2012
    Posts
    361
    Thanks
    1
    Thanked
    28 times in 22 posts
    • anselhelm's system
      • Motherboard:
      • MSI B450 Tomahawk Max
      • CPU:
      • AMD Ryzen 7 5800X
      • Memory:
      • 2x16GiB Crucial 3600MHz CL16
      • Storage:
      • 1x Samsung 850 EVO 1TB SSD, 1x WD Gold 10TB HDD
      • Graphics card(s):
      • MSI RTX 2070 Super w/ Morpheus II
      • PSU:
      • Corsair RM750x
      • Case:
      • Corsair Carbide Air 540
      • Operating System:
      • Windows 10 Pro 64-bit
      • Monitor(s):
      • MSI OPTIX MAG272QR
      • Internet:
      • Zen FTTC

    Re: News - Microsoft hurries to fix IE remote code execution bug

    Quote Originally Posted by valhar2000 View Post
    [...]allow an attacker to execute arbitrary code in the context of the current user[...]
    Time to take the plunge and start user accounts that don't have Admin rights for your daily use, people! It's a lot easier than you think, once you get the hang of it.
    Alas tried it and hated it back in the Vista days. Turns out I install and uninstall a lot more stuff than most people and use admin rights a fair bit. Good for a lot of users though.

  9. #9
    Senior Member
    Join Date
    Dec 2013
    Location
    Cymru
    Posts
    309
    Thanks
    152
    Thanked
    47 times in 45 posts
    • satrow's system
      • Motherboard:
      • ASRock Z77E-ITX
      • CPU:
      • Ivy Xeon 1230 v2/Be Quiet Shadow Rock Topflow
      • Memory:
      • GSkill 2x8GB DDR3 2400Mhz
      • Storage:
      • 3x 256GB SSDs, 2x 1TB 2.5" HDDs.
      • Graphics card(s):
      • Asus blower GTX 1060 6GB
      • PSU:
      • Seasonic 360W Gold
      • Case:
      • BitFenix Prodigy/2x 120mm fans
      • Operating System:
      • W7x64 Pro
      • Monitor(s):
      • Dual (/triple) Dell U2412M 1900x1200
      • Internet:
      • TalkTalk FTTC ~14Mbps

    Re: News - Microsoft hurries to fix IE remote code execution bug

    So far, it's only been reported to be affecting IE9-11, seems to be some targetted (spear fishing?) attack.

    Don't use IE.

    Uninstalling or disabling Flash ActiveX (in IE) will foil the attack.

    Unregistering VGX.DLL will also stop it.

    There are longer-winded methods to avoid it, too.

    http://nakedsecurity.sophos.com/2014...orer-zero-day/

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •