IE 7 users: stop looking at porn now!

Written by Adam O'Donnell @ 10:39 pm 12/15/2008

Source: IE 7 users: stop looking at porn now! | Zero Day | ZDNet.com



Microsoft has reported sightings of exploitation of the recent vulnerability in IE7 on various porn sites. This isn’t really bad news, since no one looks at such improper things on the Internet, right?

According to an article posted late saturday night on Microsoft’s Threat Research Blog, approximately .2% of all worldwide users have been exposed to exploits against the data processing vulnerability, and the exploit is now appearing on pornography sites. If Microsoft’s numbers are correct, that means millions of systems may have been freshly compromised over the past few weeks. I would be surprised if we don’t see an uptick in the knock-on effects of more compromised systems, including higher levels of spam and credit card fraud.

Since there is no patch for the IE problem as of right now, your best bet is to use an alternative browser such as Firefox, Opera, or even the Windows version of Safari. Remember, when you are browsing strange websites, it is important to use protection. You don’t know what kind of diseases they may have.

Originally Posted by RichFrogg

Remember, when you are browsing strange websites, it is important to use protection.

Be safe, wear a good browser!

LOL

The patch has been released, one interesting thing I might add from the security bulitin; Microsoft Security Bulletin MS08-078 - Critical: Security Update for Internet Explorer (960714)

By default, Protected Mode in Internet Explorer 7 and Internet Explorer 8 Beta 2 in Windows Vista and later helps protect users and their systems from malicious downloads by restricting requests to start another program or requests to save files without the user's consent. This includes user or system files and settings.

UAC saves the week yet again, I count 8 different major attacks this year it has managed to thawt or at least question the action and get permission from the user hereby mitigating the attack completely

Is there a patch for IE 8 beta 2 and Sp2 beta? I can't seem to find it as it hasn't been offered in WU.