1,000,000 + Attorneys and Legal Staff - Legal employers hire more people on LawCrossing than any other site.
Son Asks Mom, “Are We Still Slaves?”
Son Asks Mom, “Are We Still Slaves?”
Project Wing, Drone Delivery Service, Revealed by Google
Project Wing, Drone Delivery Service, Revealed by Google
Internet Responds Kindly to Young Man Kicked out of House for Coming Out
Internet Responds Kindly to Young Man Kicked out of House for Coming O...
Hate Crime Convictions in Amish Beard-Cutting Case Overturned
Hate Crime Convictions in Amish Beard-Cutting Case Overturned
Job Listings

Microsoft Warns of Coding Flaw in Internet Explorer

 

A newly discovered security hole in its Internet Explorer (IE) web browser has led Microsoft Corp to issue a security advisory over the weekend. It warned customers of a coding flaw in IE versions 6 to 11 that allows hackers to gain the same level of access on a network computer as an authorized user.

According to Liam O Murchu, Research Manager with Symantec Corp, “There are no patches available. It is very difficult for people to protect themselves.” He informed that the danger with these types of attacks is that “they will mutate, and the attackers will find a way to evade the defenses we have in place.”

What

 job title, keywords

Where

 city, state, zip



Get JD Journal in Your Mail
Subscribe to our FREE daily news alerts and get the latest updates on the most happening events in the legal, business, and celebrity world. You also get your daily dose of humor and entertainment!!


To mitigate the risk of infection, Microsoft has advised IE users to immediately install the Enhanced Mitigation Experience Toolkit (EMET). This free security tool can protect against ‘limited targeted attacks’ that Microsoft is aware about.

The flaw in IE was discovered on Friday by Eric Romang, a researcher in Luxembourg, when his PC was infected by the malicious software Poison Ivy. This software is used by hackers to steal data or take remote control of PCs. On analyzing the infection, he learned that Poison Ivy had gotten on to his system by exploiting a previously unknown bug, or “zero-day” vulnerability, in Internet Explorer.

Microsoft said hackers could host a “specially crafted website” containing content that could help them exploit the flaw. But they would still have to convince users to view the website to gain access to their computer. They could do this by getting them to click on to a link sent by email or instant messenger. The hacker would in “no way” be able to force users to view the content. If successful, a hacker could gain the same rights as the computer’s current user.

“An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights,” informed Microsoft. It also added, “IE on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode, which “mitigates this vulnerability.”

Currently, Microsoft has not provided any timeframe for coming up with a better solution than EMET to fix the bug, but several security researchers said that the update could be expected within a week. The firm’s “appropriate” steps to fix the bug could include a solution through their monthly security update release process, an out-of-cycle security update, or a patch that would aid XP users.

Microsoft Warns of Coding Flaw in Internet Explorer by

Tagged: , , ,

Posted by on April 28, 2014. Filed under Breaking News,Tech & Science News. You can follow any responses to this entry through the RSS 2.0. You can skip to the end and leave a response. Pinging is currently not allowed.

 

 

Job of the Day
Medical Malpractice Defense Associate
USA-NY-White Plains

Our client is currently seeking a Defense Medical Malpractice Associate with the following: JD from an accredited law school Must be admitted to practice in the state of New York 2-...