John Fontana reports that Microsoft has issued a security advisory regarding a zero-day exploit of Internet Explorer.
John Fontana reports that Microsoft has issued a security advisory regarding a zero-day exploit of Internet Explorer. The exploit code was posted online over the weekend. The company is working on a patch, and is likely to get it out before the next Patch Tuesday.
The attack vector is JavaScript, so users can either disable JavaScript, upgrade to IE 8 (which isn’t affected)… or switch to Firefox or Chrome.
Fontana had reported on Monday that the exploit code was thought to be unreliable, sometimes just crashing the browser rather than allowing remote code execution. But if it were fine-tuned, it could be a major threat to computers running IE.
The most recent Patch Tuesday was Nov. 10, when Microsoft released six patches, three of which were considered critical.
– Jeff Caruso
