Microsoft's Urgent Critical Update Closes IE 0Day

A few days ago we posted about a new Internet Explorer Zero Day that had surfaced. The name of the vulnerability according to Microsoft is CVE-2014-1776.

Cybercriminals, as Microsoft reports, began carrying out “limited targeted attacks,” meaning that scammers were not using malicious web links indiscriminately, but were choosing to focus on a small group of victims.

Of course, many people preferred to use temporary measuresto protect themselves while they waited for the official fix from Microsoft.

The attacks targeted IE 9, 10 and 11 and used a Flash file and a Microsoft IE extension called Vgx.dll which is used for vector graphics rendering.

But we have good news.

Microsoft has released a security bulletin announcing the immediate availability of the code that closes this vulnerability. This means you won't have to wait until the next Patch Tuesday for an updated version. HM

The company states:

All versions of IE on all versions of Windows contain a security flaw that could allow cybercriminals to inject malicious software onto your computer with little or no warning.
Microsoft has released a security update that closes this flaw so that it can no longer be used to attack your computer.
We recommend that you download the update as soon as possible, if you haven't already.
Go to Control Panel | Windows Update if you're not sure where to start.

Of course, here comes the surprise as it seems that the company even released updates for Windows XP users.

Affected Software

[1]This update is available via Windows Update.

[2]This update is for systems that have the 2961851 update installed. See the Update FAQ for more information.

[3]This update is for systems that have the 2919355 update installed. See the Update FAQ for more information.

Non-Applicable Software