Zero-day IE bug confirmed by Microsoft
March 3, 2010 by Sam NarisiPosted in: In this week's e-newsletter, Latest News & Views, Security
There’s been a lot of talk lately about the security problems with older versions of Internet Explorer. Now, a serious bug in newer releases has been uncovered, too.
On Feb. 28, Microsoft announced it’s working on fixing a bug that affects XP users running IE 7 and IE 8.
The error, which was first discovered by iSEC Security Research, can be used to plant malware on a user’s machine.
The attack uses a malicious Web page containing code disguised as a Windows help file. A pop-up window appears asking the user to hit F1, which starts the installation.
Microsoft’s working on a fix, and may include it in its next regular security update on March 7. In the meantime, warn IE users to avoid suspicious sites and never respond to dialogue boxes without knowing what it’s for. A window with a message like “Press F1 to continue” shouldn’t normally appear on a Web site.
DocuCrunch.com delivers the latest IT and Imaging news once a week to the inboxes of over 200,000 IT and Imaging professionals.
Click here to sign up and start your FREE subscription to DocuCrunch!
Tags: bug, Internet Explorer, Microsoft
Loading ...
