IE 6 & 7 Unpatched Exploit Goes Wild

Kolargol00 writes "Heise online reports the availability of an exploit (Google translation) for the yet-unpatched MSA-981374 affecting Internet Explorer 6 and 7. It has already been spotted in the wild by McAfee and integrated into the Metasploit Framework."

Comments

Serves the noobs right

[oldhack]

That's why we in the know sticks to IE5.

Re:Serves the noobs right

[jocabergs]

Personally I like AOL 2.0 but whatever floats your boat, I suppose.

Re:Serves the noobs right

[The MAZZTer]

I live life risky, 5.5 here!

Re:Serves the noobs right

[$RANDOMLUSER]

>> Personally I like AOL 2.0

ME TOO!!!

I'm safe.

[Anonymous Coward]

From the Google Translation: "For the new security hole in Internet Explorer 6 p.m. to 7 p.m..." I do most of my porn browsing much later in the day, I'll be fine.

Quick Reaction Times

[WrongSizeGlass]

It's sad that the 'bad guys' are so quick to react to these opportunities and MS can't beat them to the punch. I'm not knocking MS (well, maybe a little) because they're facing a lot more work to fix it than the asshats who exploit it.

Re:Quick Reaction Times

[TheMidget]

Bad guys? Anybody who helps to convince lusers to use proper software can't be all that bad...

They are doing all of us webmasters a huge favor, by hasting the long overdue demise of MSIE6

They use IE, do you think they care?

[SmallFurryCreature]

If you are still using IE, then a mere goatse is not going to change your mind.

Re:Just do your fucking job for once

[evilviper]

We are talking IE6 here, it is a decade old by now. Do you still use 10 year old PC's? Do you use 10 year old cars?

WTF?

YES! At my mid-sized company, we continue to use innumerable PCs which are far more than 10 years old. You think IE8 runs on Windows 98?

Incidentally, my PCs at home are also getting close to 10 years old, now:
100MHz firewall/router which consumes all of 7 watts.
1.2GHz Duron as my desktop, which I dare not replace for the immeasurable difficulty in finding a new system that fully supports S3/Suspend mode under FreeBSD/Linux.
1.3GHz Athlon system as my DVR, which has more than enough processing power for everything I do, thanks in part to GPU accelerated video decoding making it plenty fast enough for HDTV.

These systems do their job perfectly, are plenty fast for everything, etc. Why SHOULD I replace them?

And my car? It's going on 20 years, thank you very much. Sure, I have to get smog checks more often, but it's a small price to pay. And don't try bitching about it, it gets over 30MPG easily enough, and always gets a near ideal score on every smog check. Were you planning on paying the $20,000USD to get me a new car, which is more likely than not going to be inferior in many ways, like ease of maintenance, availability of parts, and cost of repairs? And how about my insurance rates?