MooSoft Musings » Internet Explorer http://www.moosoft.com/blog The tao of moo Mon, 15 Mar 2010 05:35:59 +0000 http://wordpress.org/?v=2.9.1 en hourly 1 Internet Explorer 6 and 7 Exploits in the Wild http://www.moosoft.com/blog/2010/03/10/internet-explorer-6-and-7-exploits-in-the-wild/ http://www.moosoft.com/blog/2010/03/10/internet-explorer-6-and-7-exploits-in-the-wild/#comments Wed, 10 Mar 2010 20:17:08 +0000 moosoft http://www.moosoft.com/blog/?p=260 Active exploits for bugs in IE 6 & 7 are now in the wild.  It is time to upgrade to IE 8 or another browser of your choice.

Read more here.

 

]]> http://www.moosoft.com/blog/2010/03/10/internet-explorer-6-and-7-exploits-in-the-wild/feed/ 0 MicroSoft Says Don’t Press F1 for Help http://www.moosoft.com/blog/2010/03/02/microsoft-says-dont-press-f1-for-help/ http://www.moosoft.com/blog/2010/03/02/microsoft-says-dont-press-f1-for-help/#comments Wed, 03 Mar 2010 03:55:00 +0000 moosoft http://www.moosoft.com/blog/?p=255 A new flaw has been discovered in IE that could allow an attacker to take control of your computer.

…attackers could exploit it by feeding users malicious code disguised as a Windows help file — such files have a “.hlp” extension — then convincing them to press the F1 key when a pop-up appeared.

Microsoft advises its customers to not press F1 if a website tells them to.

Windows7 users are safe from this exploit.

See more here

]]> http://www.moosoft.com/blog/2010/03/02/microsoft-says-dont-press-f1-for-help/feed/ 0 Patch available for the IE exploit along with seven others http://www.moosoft.com/blog/2010/01/21/patch-available-for-the-ie-exploit-along-with-seven-others/ http://www.moosoft.com/blog/2010/01/21/patch-available-for-the-ie-exploit-along-with-seven-others/#comments Thu, 21 Jan 2010 23:47:02 +0000 moosoft http://www.moosoft.com/blog/?p=234 Microsoft has released a patch for the IE exploit dubbed Aurora and seven other vulnerabilities.  You can get the updates via Windows Update.

Details of the patches can be found here: http://www.microsoft.com/technet/security/Bulletin/MS10-002.mspx

]]> http://www.moosoft.com/blog/2010/01/21/patch-available-for-the-ie-exploit-along-with-seven-others/feed/ 0 Malware now exploiting the IE flaw http://www.moosoft.com/blog/2010/01/20/malware-now-exploiting-the-ie-flaw/ http://www.moosoft.com/blog/2010/01/20/malware-now-exploiting-the-ie-flaw/#comments Wed, 20 Jan 2010 15:56:48 +0000 moosoft http://www.moosoft.com/blog/?p=229 Cleaner Detecting MalwareThere is now malware in the wild exploiting the IE flaw as reported here.  If you haven’t already followed the suggestions there you should do so now.

]]> http://www.moosoft.com/blog/2010/01/20/malware-now-exploiting-the-ie-flaw/feed/ 0 UPDATE: Internet Explorer 0-Day Exploit Allows Remote Code Execution http://www.moosoft.com/blog/2010/01/19/update-internet-explorer-0-day-exploit-allows-remote-code-execution/ http://www.moosoft.com/blog/2010/01/19/update-internet-explorer-0-day-exploit-allows-remote-code-execution/#comments Tue, 19 Jan 2010 20:47:53 +0000 moosoft http://www.moosoft.com/blog/?p=222 Microsoft is going to release a special patch for this exploit.  I will update this post when they announce the date of the patch availability.

See http://blogs.technet.com/msrc/archive/2010/01/19/security-advisory-979352-going-out-of-band.aspx

 

UPDATE: The patch should be released tomorrow January 21st.

UPDATE: The patch is now available on Windows Update!

]]> http://www.moosoft.com/blog/2010/01/19/update-internet-explorer-0-day-exploit-allows-remote-code-execution/feed/ 0 Internet Explorer 0-Day Exploit Allows Remote Code Execution http://www.moosoft.com/blog/2010/01/15/internet-explorer-0-day-exploit-allows-remote-code-execution/ http://www.moosoft.com/blog/2010/01/15/internet-explorer-0-day-exploit-allows-remote-code-execution/#comments Fri, 15 Jan 2010 09:49:17 +0000 moosoft http://www.moosoft.com/blog/?p=212 What is is: A malicious website can be crafted that will allow IE to be compromised and allow code to be executed on your computer.

What is affected: Internet Explorer versions 6, 7 and 8.

What you can do:

  • Get the IE patch from WindowsUpdate.
  • Run Internet Explorer in protected mode on Vista and Windows7.
  • Use a lower access account when browsing the web.  Do not log in as administrator.
  • Raise the security zone in Internet Explorer to high.
  • Use an alternate browser such as Firefox or Opera.

Internet Explorer Settings

 

More technical details can be found @ http://www.microsoft.com/technet/security/advisory/979352.mspx

]]> http://www.moosoft.com/blog/2010/01/15/internet-explorer-0-day-exploit-allows-remote-code-execution/feed/ 1