Beware of the latest IE vulnerability!

Question

This IE flaw has been rated "critical" by Microsoft.

Answer

This question was answered on March 29, 2006. Much of the information contained herein may have changed since posting.

Internet Explorer has been the victim of another critical exploit and Microsoft doesn’t plan to patch it until March 11th – per their normal patching cycle. It’s estimated that over 200 websites are currently delivering code that exploits this vulnerability, and that number is likely to rise exponentially. More alarming is that you can’t just avoid unsafe websites, because many legitimate websites have been compromised and are unknowingly distributing the code.

While Microsoft takes their time carefully crafting a patch for this IE flaw, two security companies have released unofficial patches. California-based companies – eEye Digital Security and Determina – are both offering the security update as a free download.

Author

Posted by Chad of Data Doctors on March 29, 2006