IDNetters Forums

Technical News & Discussion => Windows News & Discussion => Topic started by: Gary on Dec 23, 2010, 10:02:44

Title: MS warns over zero-day IE bug
Post by: Gary on Dec 23, 2010, 10:02:44
Microsoft warned on Wednesday of a new zero-day vulnerability in Internet Explorer.

The flaw creates a means for hackers to inject malware onto vulnerable systems, providing surfers are first tricked into visiting booby-trapped websites. As such the flaw poses a severe drive-by download risk.

All established version of IE (from 6 to 8) are affected. It's unclear whether or not the IE 9 beta is similarly vulnerable. The flaw reportedly involves the handling of Cascading Style Sheets by Microsoft's browser software. The bug first came to light on the seclists.org full disclosure mailing list earlier this month.

http://www.theregister.co.uk/2010/12/23/ms_zero_day/
Title: Re: MS warns over zero-day IE bug
Post by: pctech on Dec 23, 2010, 10:05:32
Safe surfing is always adviseable.

Title: Re: MS warns over zero-day IE bug
Post by: Rik on Dec 23, 2010, 10:08:30
It's so difficult to type through a full-body condom though. ;D
Title: Re: MS warns over zero-day IE bug
Post by: DorsetBoy on Dec 23, 2010, 10:08:43
I read that title and thought it meant Marks and Spencer, I was a tad confused  :slap:

So are they saying IE9 is not vulnerable? It is a far better browser than any of the previous versions.
Title: Re: MS warns over zero-day IE bug
Post by: pctech on Dec 23, 2010, 10:09:32
I don't think they know just yet Dorset.

Title: Re: MS warns over zero-day IE bug
Post by: Gary on Dec 23, 2010, 10:11:52
Quote from: DorsetBoy on Dec 23, 2010, 10:08:43
I read that title and thought it meant Marks and Spencer, I was a tad confused  :slap:

So are they saying IE9 is not vulnerable? It is a far better browser than any of the previous versions.
Just copied and pasted, maybe more coffee Dorset  ;) looks like IE9 may be ok. As Mitch said surf safely, although that's not as easy as it once was.
Title: Re: MS warns over zero-day IE bug
Post by: Gary on Dec 23, 2010, 10:13:49
Quote from: Rik on Dec 23, 2010, 10:08:30
It's so difficult to type through a full-body condom though. ;D
its hard when you have your keypad wrapped in one as well....that sounded wrong
Title: Re: MS warns over zero-day IE bug
Post by: Rik on Dec 23, 2010, 10:14:06
 ;D
Title: Re: MS warns over zero-day IE bug
Post by: DorsetBoy on Dec 23, 2010, 10:17:38
Quote from: Gary on Dec 23, 2010, 10:13:49
its hard when you have your keypad wrapped in one as well....that sounded wrong

You mean it muffles the sound of the keys?
Title: Re: MS warns over zero-day IE bug
Post by: Gary on Dec 23, 2010, 10:21:51
Quote from: DorsetBoy on Dec 23, 2010, 10:17:38
You mean it muffles the sound of the keys?
I'm not sure muffled comes into it Dorset, oh so many innuendos that I cant follow up on  ;D
Title: Re: MS warns over zero-day IE bug
Post by: Rik on Dec 23, 2010, 10:31:02
 :evil:
Title: Re: MS warns over zero-day IE bug
Post by: Ray on Dec 23, 2010, 10:52:42
 ;D
Title: Re: MS warns over zero-day IE bug
Post by: DorsetBoy on Dec 24, 2010, 18:04:59
http://www.pcmag.com/article2/0,2817,2374710,00.asp

Microsoft Advisory Tackles Unpatched IE Vulnerability

---------------------------------------------------------

http://www.microsoft.com/technet/security/advisory/2488013.mspx


Microsoft Security Advisory (2488013)
Vulnerability in Internet Explorer Could Allow Remote Code Execution
Published: December 22, 2010
Title: Re: MS warns over zero-day IE bug
Post by: Rik on Dec 24, 2010, 18:13:47
Thanks, Dorset. :thumb: