Microsoft Security Advisory (961051): Vulnerability in Internet Explorer
Could Allow Remote Code Execution:
http://www.microsoft.com/technet/sec...ry/961051.mspx
MS is diligently working on a patch. Make sure Automatic Updates is enabled
so the patch will be installed as soon as possible after its release.
<QP>
Said [Rick] Ferguson [senior security advisor at Trend Micro]: "If users can
find an alternative browser, then that's good mitigation against the
threat."
But Microsoft counselled against taking such action.
"I cannot recommend people switch due to this one flaw," said John Curran,
head of Microsoft UK's Windows group.
He added: "We're trying to get this resolved as soon as possible.
"At present, this exploit only seems to affect 0.02% of internet sites,"
said Mr Curran. "In terms of vulnerability, it only seems to be affecting
IE7 [1] users at the moment, but could well encompass other versions in
time."
</QP>
Source:
http://news.bbc.co.uk/2/hi/technology/7784908.stm
========
[1] While this may have been MS's position when Mr. Curran was quoted, the
vulnerability affects all IE versions and all Windows versions.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin
http://aumha.net
DTS-L
http://dts-l.net/
jim wrote:
> Is there a security exposure in using internet explorer to where a hacker
> can obtain your pc passwords? If so, is there a security update to
> correct?