New Vulnerability Discovered in Internet Explorer: Updated

A new security vulnerability in IE allows websites to steal passwords.

Nope, this isn't the Zero Day Attack, but a vulnerability based off of it. According to the BBC, security advisers are warning people to use different web browsers until the hole can be fixed.

The advice came after Microsoft released a monster patch load repairing 28 critical and important vulnerabilities on its regularly scheduled "Patch Tuesday," which falls on the second Tuesday of every month.

According to Trend Micro as many as 10,000 sites have been compromised so far, although most are Chinese according to USA Today "What we've seen from the exploit so far is it stealing game passwords, but it's inevitable that it will be adapted by criminals," said Rick Ferguson, Trend Micro's senior security advisor.

Attacks at the moment only seem to be happening to users of Internet Explorer 7, but the vulnerability does exist in earlier versions.

Microsoft is being tightlipped about the actual vulnerability and suggests that anyone wishing to continue using IE7 take appropriate countermeasures, such as working in Protected Mode and changing security settings to High.

Maybe someone got around to using that I.E. Voodoo Doll?

Source :BBC

Update: The emergency patch should be available from 1800 GMT on 17 December, Microsoft has said.

Maybe Microsoft need some Christmas Temps?

Permalink

I want IE to just go away already. I have what some might consider a strong hatred of all things IE.

The headline could have read "IE still used by some!"

My reaction would have been the same, a slow, sorrowful shaking of the head.

Hey. I use IE. Most of the time. Now I feel bad. And not this apparent password stealing issue nor you people will make me stop using it.

ElephantGuts:
Hey. I use IE. Most of the time. Now I feel bad. And not this apparent password stealing issue nor you people will make me stop using it.

I'm ok with that, willing targets make it less likely for the rest of us to get shot. :P

Firefox all the way. IE is just annoying.

The_root_of_all_evil:
"What we've seen from the exploit so far is it stealing game passwords, but it's inevitable that it will be adapted by criminals," said Rick Ferguson, Trend Micro's senior security advisor.

I find it interesting that in his quote, he doesn't count password theft as a criminal activity -mind that he is a professional security advisor.
I wonder if the law does consider password theft criminal, otherwise there's something awfully wrong here.

I love firefox, over the many many years it hasn't let me down once in either security, comfort or usefulness. Internet explorer is still necessary tho, you know... for 5 minutes after reinstalling your computer.

I'm just glad I switched to Chrome all of two weeks ago. I got sick of all the problems I was having with IE and just said screw it.

Jursa:
I love firefox, over the many many years it hasn't let me down once in either security, comfort or usefulness. Internet explorer is still necessary tho, you know... for 5 minutes after reinstalling your computer.

For me, Internet Explorer is never necessary. I keep a copy of the Firefox install on a thumb drive so I'll never have to use IE again.

IE sucks, who even uses it anymore. Its always had security issues. Mozzila is my choise.

Firefox has been giving me some problems as of late, so its Chrome for me. Btw, the minimalist design is a good choice, imo.

ckeymel:
I want IE to just go away already. I have what some might consider a strong hatred of all things IE.

It's sooo crappy....
*read in whiny little kid voice*

That's pretty shocking. I stopped using IE as it crashes every time I use it, but you'd still expect it to be safe. Maybe we should use the Voodoo dolls.

IE has security issues? Well I for one...

**BREAKING NEWS** We interrupt this forum post to bring you this latest breaking story. Sources have revealed that the Pope is indeed Catholic, and in other news a local Bear has been spotted by woodland conservationists taking a ...

... and I never ate Lobster again.

galletea:
That's pretty shocking. I stopped using IE as it crashes every time I use it, but you'd still expect it to be safe. Maybe we should use the Voodoo dolls.

I stopped using it for the same reason, but I never had any problems with it. Glad I left it when I did now.

Most people still don't know any better! Remember, friends don't let friends use Internet Explorer. Firefox, Opera, Chrome, a whole new operating system, whatever. It's for their own good.

Here's a helpful analogy: using Internet Explorer is like having unprotected sex with the internet. Yes, I know it makes you feel warm and fuzzy; that's just the viruses.

Once, while setting up a computer for a friend, I was surfing the web with IE while Firefox was downloading. In that short amount of time, it corrupted the system so badly that I had to reinstall everything all over from scratch. Never again.

TygerFish:
Here's a helpful analogy: using Internet Explorer is like having unprotected sex with the internet. Yes, I know it makes you feel warm and fuzzy; that's just the viruses.

LOL. Awesome.

Of course IE is going to have vulnerabilities. It's IE. It's programmed to be hated by its users...

Actually, before I used FF (which has been driving me crazy of late) I used IE without a problem. It crashed a few times, but that was just from me tinkering with the ENTIRE system and not knowing what I was doing.

I guess it all comes down to experience and misfortune with this new thingie.

God damnit, this reminded me that I need to switch my computer to Firefox.

D'oh!

I'm tempted to show this article to a friend of mine who is currently an IE zealot. Hopefully that'll change his mind and reveal the clear truth, that Firefox is considered by quite a few people to be just plain better.

*Isn't biased for Firefox in any way*
*coughs*

Now I feel vulnerable accessing my e-mail at school, but there's just no way around it; we can't download anything, and I need my e-mail because I routinely e-mail myself assignments so I can print them in the library (the printer I have is almost like the printer from the depths of hell itself).

Let's just say there's no subliminal advertising in my articles at all.

Ever.

Unless that's what you WANT us to think.....

ElephantGuts:
Hey. I use IE. Most of the time. Now I feel bad. And not this apparent password stealing issue nor you people will make me stop using it.

Damn right brother, glad to know I'm not alone here.

The_root_of_all_evil:
Let's just say there's no subliminal advertising in my articles at all.

Ever.

Good for you, as I also view such advertising with these flamboyant methods rather taxing.
Rather than use such obtusely and rather scattered methods, making standard adverts usually give better results in the long run.

*coughs*

BBC News:
Internet Explorer is used by the vast majority of the world's computer users.

Eeeenteresting, as IE is only about 22% of the Escapist's traffic last I checked. With Firefox at 63% or so. I know we're a certain demographic, but that's quite a disparity from "vast majority".

Go Mozilla Firefox!
Am browsing on it right now :)

Internet Explorer - The best tool in the world for downloading Mozilla Firefox

Novajam:
Internet Explorer - The best tool in the world for downloading Mozilla Firefox

This made me feel warm and fuzzy.

This is all a big lie. Internet Explorer is used by nobody.
And if somebody actually does use it, this is the LEAST of their concerns as the mere idea of using this terrible browser should've made your computer catch every single malware there is already.

I'm using IE because, unfortunately, I am not allowed to install anything on my computer at work.