Threat level raised against Microsoft IE security hole

September 19, 2012 - administrator - Uncategorized

Experts at SophosLabs have raised their threat level to “High” in response to an as-yet unpatched security vulnerability in Internet Explorer.

The zero day threat, which was uncovered at the weekend and impacts most versions of Windows, has already resulted in the German government advising users to stop using Internet Explorer.

The rise in the SophosLabs internet threat barometer comes in response to in-the-wild detections that the team has seen in attacks exploiting the CVE-2012-4969 vulnerability in Microsoft’s popular web browser.

SophosLabs defines various threat levels from “Low” to “Critical”, based upon the prevalence of malware, spam and web threats, and intelligence regarding new vulnerabilities.

Judged on its own, SophosLabs rates the Internet Explorer vulnerability as critical – but the seriousness of the threat means that our experts rate the threat level on the net as a whole as “high”.

At the time of writing, Microsoft has only published details of temporary workarounds to reduce the chances of computers being exploited by the vulnerability, but it’s clear that the ideal solution would be an official patch for Internet Explorer.

The good news is that Microsoft is working on a fix.

Yunsun Wee, a communication director at the Microsoft Security Response Center, has said that the company plans to release a “Fix It” within the “next few days”.

"The Fix it is an easy-to-use, one-click, full-strength solution any Internet Explorer user can install. It will not affect your ability to browse the Web, and it will provide full protection against this issue until an update is available. It won't require a reboot of your computer"

If you can’t wait for a fix, or if you don’t like Microsoft’s suggested mitigation workarounds, then the only sensible option is to use another browser.

Unfortunately, that’s not an easy option for companies in particular to take.

No comments yet

Leave a comment..

Your email address will not be published.


30 days to go….

With only 30 days left until Windows XP and Office 2003 support ends, it is essential that you understand the risk if you don't take action shortly. On the 8th April, Microsoft will end...

Read More

Goodbye Security Essentials

Starting August 2014, Microsoft will no longer support their free security protection software 'Microsoft Security Essentials' for Windows XP. Pinning their hopes that all Windows XP users...

Read More

Stop In-App Purchases on your Apple device

Have you ever found an Invoice for an Apple purchase you didn't even make? Heard about Apple issuing  refunds to parents for purchases their children have made? If so then you need...

Read More