New Zero-Day in Internet Explorer. Microsoft has stopped supporting its old operating system Windows XP. This means that the company no longer has security patches for this operating system.
Microsoft recently confirmed that a new vulnerability (zero-day) in Internet Explorer could be used to compromise systems running the company's browser.
According to the company, the browsers affected are Internet Explorer 6, Internet Explorer 7, 8, 9, 10, and 11.
You can see Microsoft's warning here.
The exploit exploits an unknown use-after-free vulnerability, and uses a well-known Flash exploitation to achieve arbitrary memory access to bypass Windows ASLR and DEP protections.
Unfortunately, Windows XP is one of the affected platforms, and the operating system is no longer supported by Microsoft. It should be noted that the number of users affected by the latest IE vulnerability is quite high, as Windows XP is still installed on 28% of desktop computers worldwide.
Microsoft had warned that something like this could happen, and suggested that everyone using the ancient operating system upgrade to a newer version.
Security experts claim that disabling Vgx.dll, which Microsoft says is responsible for rendering code in VML (Vector Markup Language) web pages, could be the easiest way to protect a system running Windows XP. Another easier way is to leave Internet Explorer and use another browser that keeps getting updated.
If you want to delete the DLL, open a command prompt window with administrator privileges and run the following command:
regsvr32 -u "%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll"
