Microsoft announced last September that a flaw in the construction of Internet Explorer versions 8 and 9 could allow hackers to execute arbitrary code. The announcement was followed by the release of a tool from Microsoft's Fix-It service. Read more Warning! urgent update for Internet Explorer from Microsoft.
The company, of course, then confirmed that the vulnerability «could» affect all versions of Internet Explorer that are released (6, 7, 8, 9, 10, even version 11).
Today it was announced that the exploit that can leverage the vulnerability is freely circulating on the Internet, a fact that makes millions of Microsoft Windows browser users vulnerable to attacks.
gHacks.net reports that a hacker with this specific exploit can obtain the same privileges as the logged‑in user.
Microsoft once again seems not to be dealing enough with the security of its users. Windows Update does not contain any update that fixes the security gap in its browser.
Let's hope that on October 8, with the regular updates, it will fix the vulnerability.
Source: secnews.gr
