Feeds

Microsoft issues emergency IE bug patch

Zero-day flaw exploited by hackers takes six to fix

Secure remote control for conventional and virtual desktops

Microsoft has released a 26.9MB patch which fixes five vulnerabilities, including the zero day flaw that is cracking Windows systems via the most common versions of Internet Explorer.

The MS12-063 update provides a fix for the flaw, which is in use by hackers against some companies. The patch also has four more flaw-fixes, which have not been spotted in the wild, according to Redmond.

"The majority of customers have automatic updates enabled and will not need to take any action because protections will be downloaded and installed automatically. For those manually updating, we encourage you to apply this update as quickly as possible," said Yunsun Wee, director of Microsoft Trustworthy Computing in a blog post.

The flaw was rated as critical or moderate risk, depending on which browser and operating system you are running, but would allow full remote code execution on systems running IE 7,8 and 9 running Adobe Flash on fully-patched Windows XP, Vista and 7 machines, using malware embedded in a web page.

It was discovered by security researcher Eric Romang on an Italian hacking tools site, but there have been reports that it has been used to distribute the Poison Ivy Trojan by the same group that exploited the Java zero-day flaw found in the last month.

So far the automatic update service appears to be running a little slow, at least in El Reg offices, but a manual search picks up the patch. As well as being a fairly hefty download size, the fix also requires a total restart (Linux users can look smug now.)

Microsoft will hold an hour-long webcast to discuss the flaw and its implications at 1200 PT (2000 UT) on Friday. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Meet OneRNG: a fully-open entropy generator for a paranoid age
Kiwis to seek random investors for crowd-funded randomiser
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Internet Security Threat Report 2014
An overview and analysis of the year in global threat activity: identify, analyze, and provide commentary on emerging trends in the dynamic threat landscape.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.