John Fontana reports that Microsoft has issued a security advisory regarding a zero-day exploit of Internet Explorer. The exploit code was posted online over the weekend. The company is working on a patch, and is likely to get it out before the next Patch Tuesday.
The attack vector is JavaScript, so users can either disable JavaScript, upgrade to IE 8 (which isn't affected)... or switch to Firefox or Chrome.
Fontana had reported on Monday that the exploit code was thought to be unreliable, sometimes just crashing the browser rather than allowing remote code execution. But if it were fine-tuned, it could be a major threat to computers running IE.
The most recent Patch Tuesday was Nov. 10, when Microsoft released six patches, three of which were considered critical.
- Jeff Caruso
Julie Bort is the editor of Microsoft Subnet and Network World's Online Community Editor. She also writes the Open Source Subnet blog and is the editor responsible for the Cisco Subnet and Open Source Subnet web sites. If you have an idea for a blog, or a news tip on Microsoft, Cisco or Open Source technologies, contact her at jbort@nww.com, 970-482-6454 or follow Julie on Twitter @Julie188.
The Microsoft Subnet blog is the official blog of the Network World's Microsoft Subnet community. Microsoft Subnet is the independent voice of Microsoft customers and is your gateway to daily Microsoft news, blogs, opinion, books, prize giveaways and more. Visit the Microsoft Subnet index page daily, and while you are there, subscribe to the Microsoft newsletter.
Policy on comments: Respectful discussion is welcomed! However comments that use inappropriate language, consist of name calling or personal attacks, or include accusations of wrongdoing are not appropriate. Those comments will be deleted or edited