Fri, Dec 12, 2008

Internet Explorer Vulnerability
An unpatched vulnerability in Internet Explorer, the default web browser in Microsoft Windows, is now being actively exploited by malicious website links. It allows an attacker to run arbitrary commands as the user who is running the web browser. Microsoft has not yet released a patch, but has published some workaround suggestions that can reduce the likelihood of an attack succeeding. In particular, setting internet and local intranet security zone settings to "high" is recommended. However, the use of a web browser other than Internet Explorer (such as www.firefox.com) may be advisable, at least until this vulnerability is patched. For more information, see http://www.microsoft.com/technet/security/advisory/961051.mspx.

/alerts     permanent link