Microsoft Patches Remote Code Execution Hole for Internet Explorer

mask.of.sanity writes: Microsoft has released an out-of-band patch for Internet Explorer versions seven to 11 that closes a dangerous remote code execution flaw allowing attackers to commandeer machines. From their advisory: "An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Systems where Internet Explorer is used frequently, such as workstations or terminal servers, are at the most risk from this vulnerability." The attack could assist in watering hole and malvertising campaigns. The Windows 10 Edge browser is not impacted.

Comments

IE is better than Firefox these days.

[Anonymous Coward]

As an early adopter of Firefox I hate to admit this, but modern versions of IE are now better than Firefox is.

Earlier today we learned all about vulnerabilities in Pocket, which as you may recall is part of the unwanted functionality that Mozilla forced on Firefox users earlier this summer.

At the end of last week we learned all about how Firefox makes unexpected HTTP requests when hovering over a link.

Earlier this month there was a very serious bug that allowed web sites to access the files of Firefox users.

Earlier this year we learned about ads built into Firefox.

The worst part about all of those stories is that they're just from this summer, and they're just the ones that Slashdot has bothered to report on!

Re:Who uses IE?

[Dutch Gun]

It's what everyone uses for downloading Firefox or Chrome on a new Windows machine.