Slashdot Mirror


Microsoft Issues Workaround For IE 0-Day

Orome1 writes "Microsoft has issued a security advisory with advice on how to patch a Internet Explorer zero-day vulnerability recently spotted being exploited in the wild by attackers that might be the same ones that are behind the Nitro attacks. News that there is a previously unknown Internet Explorer vulnerability that is actively being misused in the wild by attackers that are believed to be the same ones that are behind the Nitro attacks has reverberated all over the Internet yesterday."

10 of 101 comments (clear)

  1. MS advice on how to patch a IE zero-day vulnerabil by Anonymous Coward · · Score: 5, Informative
  2. Re:doublepost? by mwvdlee · · Score: 5, Funny

    It may be that the same thing is mentioned twice in a very short summary of the story, but that the same thing is mentioned twice in a very short summary of the story does obfuscate the lack of content. That is why the same thing is mentioned twice in a very short summary of the story. Why else would it be that the same thing is mentioned twice in a very short summary of the story?

    --
    Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  3. Load Firefox? by jfdavis668 · · Score: 5, Insightful

    The work around is load firefox or chrome.

  4. Re:incoherent summary by vlm · · Score: 4, Insightful

    What does this even mean? Is it the same 0-day? Is it a different 0-day? Can we get some editing up in this bitch or what?

    There's so many it doesn't really matter. They'll be another next month, and the month after that, and the month after that.... You can safely assume that at any given instant there exists at least one active zero-day infecting IE users.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  5. Workaround is stupid by Anonymous Coward · · Score: 5, Informative

    Disable ActiveX and then demand it runs to "Prompt" in both Internet AND Intranet????? This is NOT a "work-around." A work-around would be how to allow our users to continue running without being prompted to run or not run things they don't understand and don't want to.

    Or install an alternate browser.

    Sheesh, is the Internet really worth this crap? Really?

    1. Re:Workaround is stupid by Robert+Zenz · · Score: 5, Informative

      Fun fact: Forbidding ActiveX and similar things in Internet Explorer yields interesting site effects, f.e. that Visual Studio can't display error messages or the Help anymore.

  6. Tired of the IE hate... by Anonymous Coward · · Score: 4, Interesting

    Seriously, I don't use IE at home but until Chrome, Firefox, or Opera have tight integration and customization that can be centralled managed (GPO) IE will be the defacto standard browser for a lot of businesses. As an IT Manager I have tried repeatedly to move to a different browser and the tools to manage them just aren't there.

    "Hahaha those losers use IE, they suck they should just switch to chrome" are not helpful comments and show just how little you know about the many current business environments. Your beloved Chrome and Firefox, by their actions, don't want to be the default browsers in business. They just don't. That leaves us with IE which, despite these 0 days and standards issues, is superios in every way in a Windows comprate environment. Until that changes IE will be what many businesses use because browser management is just so easy it's automagic.

    And those Linux folks, switching to Linux isn't helpful either until some sort of same tier GPO management alternative that has simple interpoability is available. We could actually drop Windows and go full linux if I could gain the control I get from a Windows environment.

    Disclaimer: I use Firefox, Opera, Ubuntu, and Mint at home.

    1. Re:Tired of the IE hate... by NatasRevol · · Score: 5, Insightful

      The question is why you need to manage a browser so much.

      --
      There are two types of people in the world: Those who crave closure
    2. Re:Tired of the IE hate... by LordLimecat · · Score: 5, Informative

      Chrome can be deployed by MSI and managed by GPO. They have the ADM templates right on their site.

  7. Link to actual security advisory by Anonymous Coward · · Score: 4, Informative

    http://technet.microsoft.com/en-us/security/advisory/2757760

    Linking from "Microsoft issued an advisory" to submitter's site is kinda lowbrow.