PDA

View Full Version : Microsoft Internet Explorer Vulnerability Exposed


Puniksem
01-04-2009, 05:17 PM
How This threat Affects You


Main threat sources: E-Mail; Locally logged-on user; Web
Threat level: Critical.

What Is This About?
Microsoft has released a patch to address a critical remote-code-execution vulnerability in Microsoft Internet Explorer. The MS08-078 bulletin (Microsoft Internet Pointer Reference Memory Corruption Vulnerability) addresses the vulnerability for Microsoft Internet Explorer versions 5.01, 6, 7, and 8 Beta 2 running on Windows 2000 SP4, XP SP3, Server 2003 SP1, Vista SP1 and certain Server 2008 configurations.

Solutions: On December 17, Microsoft released a patch to address this issue.
A vulnerability in Microsoft Internet Explorer may allow remote code execution. Exploitation typically requires the user to visit a website that has specially crafted, nested XML tags. Many infected sites are in China but is spreading to more and more sites like wild-fire.

This threat is potentially high for infected users to experience the access and possible theft of personal information, passwords and any sensitive data.
The security update refers to:
MS08-078 - addresses a vulnerability in Internet Explorer (KB 960714)

To stay Protected! Download Patch now (http://update.microsoft.com/microsoftupdate/)