Internet Explorer 8 And Earlier Vulnerable To New Exploit

If you prefer to use Internet Explorer or must use it in your enterprise environment you should be aware of a new exploit that takes advantage of the way IE accesses an object in memory that has been deleted or not properly allocated.

Photo by Javier Aroche

Microsoft has acknowledged this vulnerability in the just-issued Security Advisory 2794220 which points out that this exploit only affects IE 8 and earlier. In the advisory they recommend several actions users can take to eliminate exposure to the vulnerability including upgrading to IE 9. If you still use Windows XP you can install Microsoft’s Enhanced Mitigation Experience Toolkit or just set IE’s security settings for Internet and Intranet to high which will block the exploit from running. Or you could switch browsers.

Microsoft Security Advisory (2794220) [Microsoft Technet via Ghacks]