When it is seemingly important enough, I like to run tips regarding high priority security notices. Users of Internet Explorer (any version) will want to take note of this Microsoft Security Advisory notice. The details on the problem state:
The vulnerability exists as an invalid pointer reference in the data binding function of Internet Explorer. When data binding is enabled (which is the default state), it is possible under certain conditions for an object to be released without updating the array length, leaving the potential to access the deleted object’s memory space. This can cause Internet Explorer to exit unexpectedly, in a state that is exploitable.
In a nutshell, the issue is your machine can be compromised by merely visiting a site which is coded with a special blend of scripting. You can read a more ‘user friendly’ description of the error here.
There is currently no patch for this issue as Microsoft is working to release an emergency fix. If you do use IE as your primary browser, you may want to consider using an alternate browser until this issue is resolved.
Jason Faulkner is the man who brings you our daily tips. He is based in Atlanta, Georgia.
If the software is from Microsoft, security ends the moment you break the shrink wrap on the box.
Looks like there will be a fix tomorrow: http://www.msnbc.msn.com/id/28258894/
“If the software is from Microsoft, security ends the moment break the shrink wrap on the box.”
I never quite thought of it that way, but your statement is too true. i completely agree, and in a corporate environment this is the way software should be viewed.
As a liability first and an asset later.
Why? Bespoke solutions are private and have a private code-base.
Microsoft solutions have public apis and all sorts of interfaces, so hacking them is simple.
“Internet Explorer” means that the Internet hackers can “Explore” your PC! (including those from Microsoft…)
It should have been named “Internet Exploit(er)”!
The question is: will the discovery of new vulnerabilities
ever end?