Microsoft Fixes Explorer Flaw

JohnDotCom · 18th December 2008, 09:40

Microsoft Fixes Explorer Flaw

2 hours 32 mins ago
Sky News
Microsoft has rushed out an emergency fix for its Internet Explorer (IE) software after the discovery of a flaw which allows hackers to take over PCs.

Microsoft Fixes Explorer Flaw
The company released the patch on its own rather than waiting for its regular security update next month.
The flaw was discovered last week and attacks were "spreading like wildfire", according to software security firm Trend Micro.
The company's senior security adviser Rik Ferguson told Sky News Online: "It's a flaw that affects every version of Explorer on all versions of Windows."
Mr Ferguson explained that many cyber criminals operate by using malware - software that is installed on people's computers without them knowing.
The software can then run in the background and connect to servers elsewhere, giving it the potential to detect and then pass on confidential information.
He explained that many pieces of malware are 'injected' onto websites across the world, often by cybercriminals who install them by using sign-up forms or other methods of interacting with a website.
The malware then runs a piece of Javascript that can detect when the site is being accessed on Explorer, and it then activates and downloads the malicious software.
Trend Micro believes as many as 10,000 sites have already been compromised, though Mr Ferguson said it is impossible to know how many might have been hit.
He advised switching to another browser until the patch has been downloaded and installed, as the malicious code only activates when it detects Explorer.
Microsoft rejected this advice and instead recommends putting security settings at high and turning Vista onto protected mode.
Mr Ferguson said: "All of their solutions are going to make browsing less attractive, less interactive and a lot less normal."
John Curran, head of Microsoft's Windows commercial business group in the UK, said: "Obviously when you are talking about a customer base of over one billion people, any amount of vulnerability is too much and any type of infection is going to see a large number of people affected by it."
He added the flaw was primarily being exploited in China, where it has been used to steal passwords from gamers.
Concerned users should go to http://www.microsoft.com/protect/default.mspx to download the update.

mach1rob · 18th December 2008, 12:43

So pleased I use FF!

Greeners · 18th December 2008, 13:07

Thanks JDC

I sorted it out this morning....

stocktake · 18th December 2008, 13:37

Just done, Thanks JDC:xmas:

BigRuss · 18th December 2008, 15:26

Thanks JDC sorted mine out too.:xmas:

Russ

Jules · 18th December 2008, 15:37

I think my I. Explorer rusted up a long time ago:xmas-smiley-034:
Firefox is far more advanced & versatile & suits my needs better.

Link here if anyone wants to try it http://www.mozilla.com/en-US/firefox/

Microsoft have not fixed their even bigger flaw ......called VISTA

18th December 2008, 09:40	#1
JohnDotCom * Rover 75 FaceLift Tourer CDTi 170BHP Auto ConnSE 2005 Model Starlight Silver Join Date: Nov 2006 Location: Abergele Posts: 28,735 Thanks: 0 Thanked 6 Times in 5 Posts	Microsoft Fixes Explorer Flaw Microsoft Fixes Explorer Flaw 2 hours 32 mins ago Sky News Microsoft has rushed out an emergency fix for its Internet Explorer (IE) software after the discovery of a flaw which allows hackers to take over PCs. Microsoft Fixes Explorer Flaw The company released the patch on its own rather than waiting for its regular security update next month. The flaw was discovered last week and attacks were "spreading like wildfire", according to software security firm Trend Micro. The company's senior security adviser Rik Ferguson told Sky News Online: "It's a flaw that affects every version of Explorer on all versions of Windows." Mr Ferguson explained that many cyber criminals operate by using malware - software that is installed on people's computers without them knowing. The software can then run in the background and connect to servers elsewhere, giving it the potential to detect and then pass on confidential information. He explained that many pieces of malware are 'injected' onto websites across the world, often by cybercriminals who install them by using sign-up forms or other methods of interacting with a website. The malware then runs a piece of Javascript that can detect when the site is being accessed on Explorer, and it then activates and downloads the malicious software. Trend Micro believes as many as 10,000 sites have already been compromised, though Mr Ferguson said it is impossible to know how many might have been hit. He advised switching to another browser until the patch has been downloaded and installed, as the malicious code only activates when it detects Explorer. Microsoft rejected this advice and instead recommends putting security settings at high and turning Vista onto protected mode. Mr Ferguson said: "All of their solutions are going to make browsing less attractive, less interactive and a lot less normal." John Curran, head of Microsoft's Windows commercial business group in the UK, said: "Obviously when you are talking about a customer base of over one billion people, any amount of vulnerability is too much and any type of infection is going to see a large number of people affected by it." He added the flaw was primarily being exploited in China, where it has been used to steal passwords from gamers. Concerned users should go to http://www.microsoft.com/protect/default.mspx to download the update.

18th December 2008, 13:07	#3
Greeners Moderator MG-ZTT Join Date: Mar 2007 Location: Ware, Herts Posts: 19,798 Thanks: 161 Thanked 1,249 Times in 1,036 Posts	Thanks JDC I sorted it out this morning.... __________________ *David* Impecunity is the mother of ingenuity Useful how to's for common problems Car Of The Month Jan 2014 [SatNav Power Down] [Coolant Level] [SatNav Repair] [Diesel Non Starting] [Paint Codes] [Rear Light Seals] [Reversing Light Switch] [Bleeding Brakes][Sunroof Drain] [Early ZT's][Instrument Pack Diagnostics][ATC Diagnostics]

18th December 2008, 13:37	#4
stocktake Vis Whiz Rover 75 2.5 auto Saloon Join Date: Jun 2007 Location: LEEDS Posts: 20,591 Thanks: 2,057 Thanked 3,056 Times in 1,621 Posts	Just done, Thanks JDC:xmas: __________________ Dave... Lost a few stones and a Gall Bladder and part of a bile duct and all of my dignity in the suppository incident

18th December 2008, 15:26	#5
BigRuss Premium Trader 75 CDT Tourer,2.5 Launch Saloon, Omipro MG/Rover (T4) Join Date: Jul 2007 Location: Liversedge, West Yorkshire Posts: 5,405 Thanks: 1,105 Thanked 1,340 Times in 661 Posts	Thanks JDC sorted mine out too.:xmas: Russ __________________ Replacement Key Service http://https://the75andztclub.co.uk/...d.php?t=244732 Full T4 Testbook diagnostics available. Diesel ECU repair and replacement. Options enabled or disabled as required. Diesel X-Power 135 and 160bhp, Rover 1.8T 150 to 160 MG 160 V6 to 177 upgrades available P.M. for details.

18th December 2008, 15:37	#6
Jules This is my second home ZT 260 SE Twilight and 10 other 75 ZT's :O Join Date: Jan 2007 Location: Conwy NORTH WALES Posts: 11,094 Thanks: 512 Thanked 1,116 Times in 763 Posts	I think my I. Explorer rusted up a long time ago:xmas-smiley-034: Firefox is far more advanced & versatile & suits my needs better. Link here if anyone wants to try it http://www.mozilla.com/en-US/firefox/ Microsoft have not fixed their even bigger flaw ......called VISTA __________________ [SIGPIC][/SIGPIC] Newbies do now!! 1. Plenum drains..all 3 or 4 year dependent 2. Cooling fan..All speeds functioning 3. Bonnet cable divider block

18th December 2008, 12:43	#2
mach1rob Gets stuck in Join Date: Jan 2007 Posts: 889 Thanks: 0 Thanked 1 Time in 1 Post	So pleased I use FF!