Microsoft warns of Internet Explorer security gap

[dfergie]

Microsoft says a security gap in Internet Explorer could allow an attacker to take complete control of a computer if the user clicks on a link to a malicious website.
The vulnerability affects versions 6 through 11 of the Web browser.

cbsnews.com

 

[dfergie]

Our IT department sent out emails today to everyone on this ...

Until Microsoft releases a patch and we have testedand deployed it, we have turned on a feature called McAfee Click Protect whichscans these links when the email comes in, and then again when you click on thelink.

 

[Tecmo SB Guy]

Has Microsoft put out the patch for this already or should I still avoid IE? Because I ran Windows Update and it downloaded and installed this:

http://support.microsoft.com/kb/2961887

 

[lfp302]

I believe I heard a radio report that Microsoft was still writing the patch.

 

[Tampa8]

So there are people still using IE? Who knew.

 

[FaT Air]

I've avoided I.E., except to visit windows update, for 10+ yrs.
MOF, Lately I avoid windows, unless it's absolutely necessary. (Linux software equivalent unavailable)

 

[jorgek]

Apparently the patch is due on May 13th.

 

[lparsons21]

I still use IE, but only on my SurfacePro and Asus T100 and then only to a very few sites. My Macbook Pro is my primary computer for most other things. So I doubt I will change how I do things. Good to know they've identified the problem, not so good that it will take awhile to get a fix out.

 

[mike123abc]

I mostly use chrome, I have to use IE for certain work sites, hopefully none of them get corrupted until the patch is issued.

 

[mike123abc]

http://www.tomshardware.com/news/microsoft-internet-explorer-vulnerability-windows-xp,26650.html

I posted this in the XP thread too since there was a discussion of the same bug. The article shows a work around by unregistering a DLL will stop the exploit. Probably the only workaround for XP since MS probably will not patch it.

One workaround, which is listed towards the bottom of Microsoft's alert, includes disabling VGX.dll, which is responsible for rendering of VML (Vector Markup Language) code in webpages. VML is only infrequently used on the web, Kandek adds, so disabling it in IE is the best way to prevent exploitation. To deregister it, type in the following:

regsvr32 -u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"

 

[klang]

Fix due this afternoon including an update to XP according to engadget.

 

[mike123abc]

Fix due this afternoon including an update to XP according to engadget.

Probably a major setback for cyber criminals.

 

[mike123abc]

My computers all updated overnight.

 

[eurosport]

My computer gives me an error. "Windows can't check for updates"
Last successful automatic update was March 19th. No amount of searching Microsoft help has helped me figure it out.
Using Google chrome instead of IE but I still need to get this fixed.

Sent from my SCH-I535 using SatelliteGuys

 

[waylew]

My computer gives me an error. "Windows can't check for updates"
Last successful automatic update was March 19th. No amount of searching Microsoft help has helped me figure it out.
Using Google chrome instead of IE but I still need to get this fixed.

Sent from my SCH-I535 using SatelliteGuys

Just leave it on automatic update,it should find it,mine did.

 

[mike123abc]

My computer gives me an error. "Windows can't check for updates"
Last successful automatic update was March 19th. No amount of searching Microsoft help has helped me figure it out.
Using Google chrome instead of IE but I still need to get this fixed.

Is there an error code? Which version of Windows? It could be a virus blocking the windows update.

 

[Don in CT]

Probably a major setback for cyber criminals.

As well as Microsoft saying no more updates for XP.

 

[Sean Mota]

Check you date/time are correct.

Posted Via The FREE SatelliteGuys Reader App!