Microsoft confirmed Saturday that a new security vulnerability was affecting all versions of Internet Explorer by allowing "limited, targeted attacks." Microsoft said it was investigating the security glitch, which allowed for remote code execution, and affected all versions of Internet Explorer -- IE 6 through 11. Currently versions 9, 10 and 11 are being attacked, according to FishEye, the research firm that alerted Microsoft to the vulnerability Friday. The attacks are taking advantage of "use after free" vulnerability -- a little known vulnerability that allows data corruption after memory has been released.The vulnerability also bypasses both Windows DEP (data execution prevention) and ASLR (address space layout randomization) protections, according to FireEye. "The APT [advanced persistent threat] group responsible for this exploit has been the first group to have access to a select number of browser-based 0-day exploits (e.g. IE, Firefox, and Flash) in the past," FireEye said. "They are extremely proficient at lateral movement and are difficult to track, as they typically do not reuse command and control infrastructure." Windows server versions that run on Internet Explorer in the default Enhanced Security Configuration are not vulnerable unless an affected site is placed in the Internet Explorer Trusted sites zone. Microsoft said it was investigating the vulnerability and would issue an security update to address the problem.
GMT 22:53 2018 Thursday ,13 December
Indian Minister of Trade meets with UAE Ambassador, Chairman of Emaar PropertiesGMT 13:41 2018 Thursday ,06 December
Tyre maker Continental opens lab to extract rubber from dandelionsGMT 15:22 2018 Friday ,30 November
Paper industry around famous Chinese lake to be shut down by 2019GMT 11:13 2018 Sunday ,18 November
Electricx 2018 kicks off with participation of over 20 countriesGMT 14:17 2018 Thursday ,25 October
BP eyes entering several new Rosneft projectsGMT 12:08 2018 Saturday ,20 October
OPEC participants performed Vienna Agreement by 111%GMT 16:14 2018 Saturday ,06 October
Saudi Aramco IPO to go ahead by early 2021GMT 19:01 2018 Thursday ,04 October
LEAD S. Korean firms offer aid for quake-hit IndonesiaMaintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©
Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©
Send your comments
Your comment as a visitor