New Internet Explorer Vulnerability Confirmed

[A Guy]

Microsoft have confirmed a new Internet Explorer security vulnerability which is affecting only pre-Windows Vista operating systems like Windows XP meaning that users running Windows 7, Windows Vista, Windows Server 2000 and Server 2008 R2 are not affected by the issue.

The vulnerability is not exploited currently according to Microsoft’s information and it is not likely that it will as a user on the target system needs to be convinced to press the F1 key in response to a pop up dialog box on a specifically prepared website.


The issue in question involves the use of VBScript and Windows Help files in Internet Explorer. Windows Help files are included in a long list of what we refer to as “unsafe file types”. These are file types that are designed to invoke automatic actions during normal use of the files. While they can be very valuable productivity tools, they can also be used by attackers to try and compromise a system. To help customers better understand unsafe file types, we have published a white paper on the topic which you can find by clicking this link.


There is currently no fix for affected operating systems but Microsoft confirmed that they continue investigating the issue. It is likely that a patch for the vulnerability will be provided shortly. As of now all users need to remember is to not press F1 when they are accessing websites.

http://www.ghacks.net/2010/03/01/new...ity-confirmed/

A Guy

[utkarsh30june]

Aw nothing new......Seriously, the best way to remain safe online is to stay away from IE.

[A Guy]

But be interesting to see how many here still use IE as default. Always a big number, even on forums where security is discussed. A Guy

[ceyfer]

But be interesting to see how many here still use IE as default. Always a big number, even on forums where security is discussed. A Guy

I still use IE 8. The browser is just a a threat gate, the user has to do something to mitigate browser based attack.

It is likely that a patch for the vulnerability will be provided shortly

User Awareness : security updates, proper surfing habit, secure browser configuration,security solutions are there to protect the user.

[shan]

and they where all off about firefox 3.6 un confirmed (im nt sure) vulnerability ha...