Microsoft Warns About Flaw That Makes Hacking Easier

[Karthik R 246]

Microsoft has warned about a flaw on the Internet Explorer browser that could allow hackers to take control of unprotected computers.

The bug allows hackers to inject malware onto any system if they manage to trick users into visiting booby-trapped websites. Anyone with Internet Explorer (IE) 6 to 8 is potentially affected.

The code to exploit the bug has already been published. The computer giant said there was no evidence it was being used yet by criminals but they were "investigating" and working on a permanent fix, reports the Daily Mail.

Dave Forstrom, director of Microsoft's Trustworthy Computing group, said: "We're currently unaware of any attacks trying to use the claimed vulnerability or of customer impact."

The bug targets how the browser manages a computer's memory when it is processing Cascade Style Sheets - which are design instructions that determine how most web pages look.

Hackers can inject their own code into the stream of instructions and in this way hijack the PC. Although Microsoft has improved how memory management is protected, it does not work when some older parts of Windows are called on.

The bug first came to light on the seclists.org full disclosure mailing list earlier this month.

Rik Ferguson, security analyst at Trendo Micro, told the BBC: "As vulnerabilities go, this kind is the most serious as it allows remote execution of code. This means the attacker can run programmes, such as malware, directly on the victim's computer."

"It is highly reminiscent of a vulnerability at the same time two years ago which prompted several national governments to warn against using IE and to switch to an alternative browser."

Source : Economic Times

[raccoon 53]

Good for people who still use IE, lol! Serves them right!! Not just the market leader, but also the undisputed leader when it comes to number of exploits. Edited December 27, 2010 by raccoon

[parin 857]

Good that i am not using IE

[Harshal 11]

LOL, it says people using 6 - 8. That leaves only us 9 beta users out. Which BTW s**ks, since I have marked compatibility mode on most websites.

Including our beloved rimweb.

Including GMail. Which funilly recognizes that I am running IE9 in compatibility mode and tells me to switch it off. But, as soon as you do that, the manage contacts page is a mess. Long live MS - and Google too in this case.

[Karthik R 246]

IE 9, though the best offering so far from MS with very clean UI, requires the recent avatars of Windows - Vista SP 2 or Windows 7. No XP.

Corrupt system error. Although your system is working fine, there is a newer version of Windows available. Internet Explorer will now begin to sabotage your system so parts will not work right until you buy the Windows upgrade to "fix" these problems