Internet Explorer Zero-Day Threat – Security Update Included

This post was written by admin on December 17, 2008
Posted Under: Free PC Security,IE Exploit

Update: Patch released, go to Windows Update to install the latest patch.

You must reboot after installing this patch, in some cases it requires two reboots to be applied successfully.

This update is rated as Critical for Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, and Internet Explorer 7.

Further information on this patch: Microsoft Security Bulletin

**********

There is a new zero-day Internet Explorer 7 exploit which is now out in the wild. It is a drive-by dropper that resides on malicious Web sites.

Infected domains attempt to download a Remote Access Trojan, which, if successful will install a Gh0st RAT on users systems.

This exploit is extremely dangerous, and at present there is no solution from Microsoft at this time.

The simplest solution is NOT to use IE7 and to use an alternative browser such as FireFox, Google Chrome, or Safari.

Microsoft has acknowledged this problem stating:
“Microsoft is investigating new public reports of attacks against a new vulnerability in Internet Explorer. Our investigation so far has shown that these attacks are against Windows Internet Explorer 7 on supported editions of Windows XP Service Pack 2, Windows XP Service Pack 3, Windows Server 2003 Service Pack 1, Windows Server 2003 Service Pack 2, Windows Vista, Windows Vista Service Pack 1, and Windows Server 2008.”

Shadowserver.org has listed many of the domains that are hosting the exploit-carrying Web sites and is updating them regularly.

Suggested workarounds from Microsoft click here.

Internet Explorer is NOT a good choice of browser for surfing with its inherent problems which seem to be never ending.

Keep it for downloading Windows Updates, but use a safer browser such as Firefox for all of your surfing, it's much safer and more stable.

Download Firefox here

50 Firefox add-ons to give you more protection