IE has serious security hole - says Microsoft

[Rico]

Stick to Firefox:

SAN JOSE, Calif. -

Microsoft Corp. has taken the rare step of warning about a serious computer security vulnerability it hasn't fixed yet.

The vulnerability disclosed Monday affects Internet Explorer users whose computers run the Windows XP or Windows Server 2003 operating software.

It can allow hackers to remotely take control of victims' machines. The victims don't need to do anything to get infected except visit a Web site that's been hacked.

Security experts say criminals have been attacking the vulnerability for nearly a week. Thousands of sites have been hacked to serve up malicious software that exploits the vulnerability. People are drawn to these sites by clicking a link in spam e-mail.

The so-called "zero day" vulnerability disclosed by Microsoft affects a part of its software used to play video. The problem arises from the way the software interacts with Internet Explorer, which opens a hole for hackers to tunnel into.

Microsoft urged vulnerable users to disable the problematic part of its software, which can be done from Microsoft's Web site, while the company works on a "patch" — or software fix — for the problem.

Microsoft rarely departs from its practice of issuing security updates the second Tuesday of each month. When the Redmond, Wash.-based company does issue security reminders at other times, it's because the vulnerabilities are very serious.

A recent example was the emergency patch Microsoft issued in October for a vulnerability that criminals exploited to infect millions of PCs with the Conficker worm. While initially feared as an all-powerful doomsday device, that network of infected machines was eventually used for mundane moneymaking schemes like sending spam and pushing fake antivirus software.

source:
http://tech.yahoo.com/news/ap/20090707/ap_on_hi_te/us_tec_microsoft_security

[billybob476]

Please people, don't click on strange links in emails. All this can be avoided.

[Rico]

Please people, don't click on strange links in emails. All this can be avoided.

To a degree for some that helps, but once a site is infected all it takes is for you to visit the website using IE to become infected yourself.

[sheldor]

No problems here...knock on wood, rubbing rabbits foot, 4-leaf clover in my wallet, crossing my fingers...

[Yeoman Mara]

Of course it all depends on the sites you visit.

[KingIsaacLinksr]

Good thing I use firefox atm....(despite the latest bugs I've had with it).

King

[sheldor]

Good thing I use firefox atm....(despite the latest bugs I've had with it).

King

Ohhhh... so THAT'S why you all have firefox.  So you can visit all those risque...ooops, I mean risky sites ;)

[alanp]

This is one of the reasons I've only ran Macs and PCs with Linux since 2003.

[billybob476]

Good thing I use firefox atm....(despite the latest bugs I've had with it).

King

Ohhhh... so THAT'S why you all have firefox.  So you can visit all those risque...ooops, I mean risky sites ;)

No no, you were right the first time. :D

[Rico]

Good thing I use firefox atm....(despite the latest bugs I've had with it).

King

Ohhhh... so THAT'S why you all have firefox.  So you can visit all those risque...ooops, I mean risky sites ;)

Any site can get hit.  Even Amazon.com has been messed with at times.

[M-5]

I'm glad I switched to the Mac.

[alanp]

Get the fix for PC security flaws here:
http://fedoraproject.org/en/get-fedora

[Bryancd]

Get the fix for PC security flaws here:
http://fedoraproject.org/en/get-fedora

...or here!  :biggrin

http://store.apple.com/us?afid=p202%7CGOUSE100392030&cid=OAS-US-KWG-AppleBrandName-US

[Rico]

Ahhh - Apple vs. PC again?!  That didn't take long.

[billybob476]

Here, the only issue is you may get a splinter.