IT security, vunerabilities, bugs, fixes, flaws, RSA conference and Infosec.
A blog from V3.co.uk

« Haiti earthquake disaster exploited by cyber criminals | Main | Fake Firefox site pushing out adware »

Microsoft plays down IE flaw risk

Microsoft has been doing some desperate fire fighting since a flaw in its Internet Explorer browser was found to have been the vector by which Chinese hackers attempted to infiltrate Google's systems.

Since then, both the French and German authorities have urged their citizens to use another browser until the flaw is patched.

But Microsoft UK's chief security officer Cliff Evans was keen to stress to V3.co.uk yesterday that although the vulnerability technically affects IE6, IE7 and IE8, "the exploits we're seeing out there at the moment only affect IE6", which is the smallest group of IE users in the UK.

The message was loud and clear - upgrade to IE8, whose advanced security features which include the SmartScreen filter and Data Execution Protection, will make it extremely difficult for hackers to implement the exploit code effectively on this browser.

As to whether Redmond will implement a security fix as part of the next scheduled patch Tuesday or an out-of-band release, Evans argued the team will need to take a considered view.

"The actual risk is minimal - you'd need to be using IE6 on XP and to visit these [malicious] sites," he added. "We'll have to balance the perceived risk with getting people to roll out yet another update."

January 19, 2010 |

Comments

the big issue is security experts warned that exploit code, which would enable cyber criminals to exploit the IE flaw, was circulating freely on the internet.Now patches is other option or stay away from this browser.

Posted by :cheap r4 | February 1, 2010 9:11 AM

Post a comment







Site credentials: About | Privacy policy | Terms & conditions | Top of the page
© Incisive Media Investments Limited 2010, Published by Incisive Financial Publishing Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, are companies registered in England and Wales with company registration numbers 04252091 & 04252093