Microsoft releases fix-it for Internet Explorer 8 vulnerability

May 09, 2013

Microsoft has released a temporary fix for a zero-day vulnerability in Internet Explorer 8, which was used by hackers in a prominent attack against the U.S. Department of Labor’s website. The problem is particularly dangerous since it can allow an attacker to install malware merely by visiting a tampered webpage. Microsoft is still working on a patch, wrote Dustin Childs, group manager for the company’s Trustworthy Computing division. “Customers should apply the Fix it or follow the workarounds listed in the advisory to help protect against the known attacks,” Childs said in a statement. The vulnerability is described as a problem in the way IE “accesses an object in memory that has been deleted or has not been properly allocated.” IE versions 6, 7, 9 and 10 are not affected. To read this article in full or to leave a comment, please click here

Link: http://www.pcworld.com/article/2038242/microsoft-releases-fixit-for-internet-explorer-8-vulnerability.html#tk.rss_all