News - Microsoft hurries to fix IE remote code execution bug
Quote:
'Zero Day' flaw affects IE6, 7, 8, 9, 10 and 11. Windows XP users to be left in the cold.
Read more.
Re: News - Microsoft hurries to fix IE remote code execution bug
"Microsoft also recommended, in a statement to Reuters, that Windows XP users should upgrade to Windows 7 or 8, as they will receive no system updates to address this vulnerability when they become available."
Who'd have thought... ;)
Re: News - Microsoft hurries to fix IE remote code execution bug
A big one so soon after Windows XP support ends....ho hum, I think the phrase "Time to upgrade" is going to get used a lot over the coming months.
Re: News - Microsoft hurries to fix IE remote code execution bug
Why on earth are people still using IE6?
Re: News - Microsoft hurries to fix IE remote code execution bug
Quote:
Originally Posted by
MaddogPepper
Why on earth are people still using IE6?
In this country proprietary, horribly designed government/council applications which won't work on other browsers no doubt. Of course, newer versions will probably be available, but would require spending money.
Re: News - Microsoft hurries to fix IE remote code execution bug
Quote:
[...]allow an attacker to execute arbitrary code in the context of the current user[...]
Time to take the plunge and start user accounts that don't have Admin rights for your daily use, people! It's a lot easier than you think, once you get the hang of it.
Re: News - Microsoft hurries to fix IE remote code execution bug
Quote:
Originally Posted by
MaddogPepper
Why on earth are people still using IE6?
I had to use it at my old work and it made my cry every day.
Re: News - Microsoft hurries to fix IE remote code execution bug
Quote:
Originally Posted by
valhar2000
Quote:
[...]allow an attacker to execute arbitrary code in the context of the current user[...]
Time to take the plunge and start user accounts that don't have Admin rights for your daily use, people! It's a lot easier than you think, once you get the hang of it.
Alas tried it and hated it back in the Vista days. Turns out I install and uninstall a lot more stuff than most people and use admin rights a fair bit. Good for a lot of users though.
Re: News - Microsoft hurries to fix IE remote code execution bug
So far, it's only been reported to be affecting IE9-11, seems to be some targetted (spear fishing?) attack.
Don't use IE.
Uninstalling or disabling Flash ActiveX (in IE) will foil the attack.
Unregistering VGX.DLL will also stop it.
There are longer-winded methods to avoid it, too.
http://nakedsecurity.sophos.com/2014...orer-zero-day/