Home > Insights > Blogs 

CA Community

This Blog

Urgent: Microsoft out-of-band security update for Internet Explorer

Published: December 18 2008, 08:30 PM
by Benjamin Googins

I don’t post on vulnerabilities often, but this Internet Explorer vulnerability is particularly bad and needs your attention.  Do you use Internet Explorer?  If yes, I highly recommend patching your system NOW.

Microsoft released an urgent security update today for Internet Explorer on all currently supported versions of Windows.  CA ISBU has seen a number of malware, already, that exploit this vulnerability and we feel this could be a significant threat to users.  Consider this a race between you and the malware authors.  Can you patch your computer before they can exploit it?

What follows is quoted from Microsoft at http://www.microsoft.com/protect/computer/updates/bulletins/200812_oob.mspx

Bulletin ID: MS08-078
Maximum Severity Rating and Vulnerability Impact: Security Update for Internet Explorer (960714)

This security update resolves a publicly disclosed vulnerability. The vulnerability could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Maximum Severity Rating and Vulnerability Impact: Critical (A vulnerability whose exploitation could allow the propagation of an Internet worm without user action.): Remote Code Execution

Restart Requirement: May require restart
Affected Software: Microsoft Windows, Internet Explorer”

To update your computer, refer to Microsoft here: http://www.microsoft.com/protect/computer/updates/bulletins/200812_oob.mspx

 

Share this post:  EmailEmail

By: Benjamin Googins
Benjamin Googins is a senior engineer working on CA’s Anti-Spyware product. His primary functions include analyzing spyware and privacy breaches, fielding press inquiries, blogging and drafting documents. He has been a significant contributor to the User Permission document , Spyware Scorecard , Threat...
Read More..

1 person has left a comment:

Ah I see a race? Sadly, I was too late. So now what?

Posted by: Andrew C. | December 22, 2008 8:06 PM

 
 
Page Tools