IE Zero Day is "For Real"

KIA · 17 Sep 2012 at 19:29

I can confirm, the zero-day season is really not over yet. Less than three weeks after the discovery of the Java SE 7 0day, aka CVE-2012-4681, potentially used by the Nitro gang in targeted attacks, a potential Microsoft Internet Explorer 7 and 8 zero-day is actually exploited in the wild.

http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/

Switch to a better browser!

KIA · 17 Sep 2012 at 20:58

Glaucus said:
Yeah ie 9 or 10.
Keep upto date software and your chances of being attacked are mssievly reduced.

Ever heard of XP?

The only solution is to install a better browser.

MS better release an out of cycle patch ASAP.

KIA · 17 Sep 2012 at 21:48

PMKeates said:
To be fair, Windows XP is 11 years old.

There's still a huge install base.

KIA · 21 Sep 2012 at 19:03

Patches are out. https://isc.sans.edu/diary.html?storyid=14155&rss