Microsoft Internet Explorer Use-After-Free Vulnerability Guidance

Discussion in 'Industry News' started by Diabulus in Musica, Apr 29, 2014.

  1. Diabulus in Musica

    Diabulus in Musica Platinum Record

    Joined:
    Jun 7, 2011
    Messages:
    762
    Likes Received:
    207
    Location:
    AudioSex
    [​IMG]

    US-CERT is aware of active exploitation of a use-after-free vulnerability in Microsoft Internet Explorer. This vulnerability affects IE versions 6 through 11 and could allow unauthorized remote code execution.

    US-CERT recommends that users and administrators review Microsoft Security Advisory 2963983 for mitigation actions and workarounds. Those who cannot follow Microsoft's recommendations, such as Windows XP users, may consider employing an alternate browser.

    http://www.us-cert.gov/ncas/current-activity/2014/04/28/Microsoft-Internet-Explorer-Use-After-Free-Vulnerability-Being
     
  2.  
  3. Pm5

    Pm5 Ultrasonic

    Joined:
    Oct 20, 2012
    Messages:
    442
    Likes Received:
    32
    paranoid plot theory about xp patch unavailability in ... 3 ... 2 ... 1 ...
     
  4. transporter1333

    transporter1333 Member

    Joined:
    Oct 27, 2013
    Messages:
    252
    Likes Received:
    15
    Location:
    Brazil
    With all my respect with the IE users, in my opinion, IE is the "Gates OF Hell"... :snuffy:
     
  5. Willum

    Willum Rock Star

    Joined:
    Jun 13, 2011
    Messages:
    751
    Likes Received:
    440
    ..0 What you mean the paranoid plot theory about them stopping all support for XP!

    Oh wait, thats actually true. :)
     
  6. Catalyst

    Catalyst Audiosexual

    Joined:
    May 28, 2012
    Messages:
    5,810
    Likes Received:
    802
    This is a bad driveby exploit too. Since it's an IE flaw I really don't understand why they can't patch it on XP. It's almost like they went out of their way to make that happen. :snuffy:
     
  7. Evorax

    Evorax Rock Star

    Joined:
    Feb 28, 2013
    Messages:
    1,764
    Likes Received:
    319
    Location:
    Bowerstone Castle
    :rofl: Your irony makes your post funny.
     
  8. copylefter

    copylefter Producer

    Joined:
    Mar 3, 2012
    Messages:
    707
    Likes Received:
    118
    Location:
    text_section
    It's the first thing that came to my mind. Surely it's not a remote possibility.

    Source: http://rt.com/usa/155448-microsoft-internet-explorer-0day/


    So XP users are basically screwed. Well, those XP users who still use IE. Seeing from the report above they seems to be still a lot :wow:
    Anyway people who still use IE in 2014 deserve that treatment :bleh: (Just kidding!)


    Seems government will receive premium treatment as always

    Source: http://www.computerweekly.com/news/2240217389/Government-signs-55m-Microsoft-deal-to-extend-Windows-XP-support

    Source: http://www.crn.com/news/applications-os/300072525/irs-misses-windows-xp-deadline-inks-extended-support-deal-with-microsoft.htm
     
Loading...
Loading...