8 replies to this topic

[Nvyseal]

images/news/ie.jpgIt appears that the exploit in IE briefly mentioned a few days ago is causing a serious reaction: SteveAU writes "Microsoft has begun flooding media outlets with information advising users to switch to an alternate browser while a serious security flaw is being patched. The flaw, which affects all versions of Microsoft Internet Explorer, is manifested via malware and has infected over 6,000 sites thus far. Microsoft states: 'The vulnerability exists as an invalid pointer reference in the data-binding function of Internet Explorer. When data binding is enabled (which is the default state), it is possible under certain conditions for an object to be released without updating the array length, leaving the potential to access the deleted object's memory space. This can cause Internet Explorer to exit unexpectedly, in a state that is exploitable.'" According to the BBC report, though, Microsoft itself is only asking that users be "vigilant while it investigated and prepared an emergency patch"; it's outside experts who say to dump IE (at least for now).

BBC

[talker]

I installed the patch to all systems today (16 December). Has anyone heard if the patch is effective or is it another Redmond bandaid for a bullet wound?????...Bill.

[m.oreilly]

bill...was this through WU, or...?

[error51]

Download actual patch at...

http://www.microsoft.com/technet/security/...n/MS08-078.mspx

[m.oreilly]

i'm running ie8

[error51]

m.oreilly, on Dec 17 2008, 09:02 PM, said:

i'm running ie8

Your trophy is in the mail.

[m.oreilly]

[talker]

m.oreilly, on Dec 17 2008, 10:39 PM, said:

bill...was this through WU, or...?

Yep, all came from WU but required a scan. Auto Update had not done the job or maybe I beat it to the punch...Bill.

[talker]

After using the "patch" for 5 days, IE is slow and hangs often. It has crashed numerous times. None of this behavior existed prior to the patch. No other programs have been installed/uninstalled since the patch. Perhaps the vulnerability was fixed but the overall IE performance went to heck. I am using IE 7.0.6001.18000 on Server '08 x64. Connection is a 6 Mbs DSL. Anyone else experienced any odd behavior????