Critical vulnerabilities found in Internet Explorer

A critical vulnerability found in all supported versions of web browser Internet Explorer, including IE6, IE7, IE8, IE9, IE10 and IE11, - said company Microsoft on portal TechNet.

The vulnerability affects all versions of Windows, from Windows XP, and ending with Windows 8.1, which is scheduled to release only in October.

The vulnerability allows an attacker to remotely execute arbitrary code on a victim's computer after the user visits an infected website. Vulnerability is based on an error, which resulted in IE tries to access an object in memory that has been deleted or has not been placed correctly.

In Microsoft said that in the present study reports on the attacks perpetrated by hackers, focusing mainly on IE8 and IE9.

Microsoft has released an emergency patch for Internet Explorer

After Oracle which has let out emergency updating for Java, the Microsoft corporation let out urgent updating for the Internet Explorer browser where vulnerability which was used actively by hackers at commission of a number of target attacks to computers in a public sector of the various countries was eliminated. Hotfix for Internet Explorer 6, 7 and 8, where it is already placed in the automatic system updates, which will allow most modern Windows users automatically get it.

Dustin Childs, manager of the Microsoft Trustworthy Computing, said that the fix is ​​a given priority because of the increased risk of a bug, and the fact that these attacks have been conducted on people and corporations are known cases of infection with malware number of government systems through a vulnerability in the Internet Explorer.

Microsoft says that the latest version of Internet Explorer 9, and 10 have higher security systems and this bug it basically is not terrible, but for these browsers will later fix is ​​to close the vector danger.

Microsoft warned about vulnerabilities in Internet Explorer

Microsoft in the past weekend reported the discovery of a serious vulnerability in the browser Internet Explorer.

According to the corporation, vulnerability affects versions of IE 6, 7 and 8, where the vulnerability is already in operation on the Internet and potential attackers can now use it. The company said that working hard as soon as possible to release a fix.

In addition, the company's engineers have proposed a temporary maneuver, can significantly reduce the likelihood of execution attacks. In a statement from Microsoft on December 29, said the company is aware of cases in targeted attacks on computers using a browser up to version IE8. Newer versions borauzera, including IE9 and 10 is not affected, however, and for these people the company is also preparing an update to fix a potentially dangerous element.

According to several IT companies, hackers have posted an exploit on the site of the American non-partisan organization Council on Foreign Relations in New York and Washington. So, last Friday the company FireEye reported that the site was compromised and the CFR on it a code, which in closed forums has been fixed on December 21. Code itself initiates an attack like drive-by.