Trends

Internet Explorer Zero Day Exploit Puts Users at Risk

Written by Dino Londis

Microsoftt has identified an Internet Explorer zero day exploit. A problem for all, but the first of many vulnerabilities for Windows XP. Read more here.

aNewDomain.net — Over the weekend Microsoft confirmed an Internet Explorer zero day exploit, highlighting a vulnerability that can allow hackers to attack the IE browser and the operating system it runs on.

Microsoft says,

The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website.”

Hackers can exploit the browser and attack the PC when users visit a website. Internet professionals are strongly recommending that customers not use Internet Explorer until Microsoft uploads a patch for it. There are many browser alternatives to IE including Chrome, Opera and Firefox.

Internet Explorer Zero Day Exploit Windows

Image courtesy: Wikimedia Commons

Virtually all versions of Internet Explorer are vulnerable. The exploit was discovered by FireEye, who observed attacks against Internet Explorer versions 9 – 11, though all versions of Internet Explorer are affected.

Although Microsoft will develop a patch for Windows XP, it will only release it to preferred customers who are paying $200 a year per PC for security patches. Windows XP users should not use IE again. Or better still; upgrade the 13-year-old operating system.

If customers must use IE, Microsoft recommends using it in Enhanced Protected Mode.

FireEye just discovered the exploit, but hackers may have known about it for years. And like the HeartBleed vulnerability that was discovered earlier this month, it has underscored the unknown pernicious security flaws that hackers can use to compromise data.

A zero day exploit — an attack that exploits a previously-unknown vulnerability — means that the attack occurs on “day zero” of awareness of the vulnerability. The Internet Explorer zero day exploit means that the developers have had zero days to address and patch the vulnerability.

Stop using it now and wait for an update.

For aNewDomain.net, I’m Dino Londis.

Based in New York, Dino Londis is a senior commentator at aNewDomain.net. He’s also an IT Pro alum at National Lampoon and teamBYTE. Email him at Dino@aNewDomain.net.

About the author

Dino Londis

  • alrui

    First it seems Microsoft is really really trying to convince users to abandon XP and this is simply another sad sales ploy. Second seems we needs laws on the books that forces support of older systems and software if said lousy software is found to have security defects!