Page 1 of 1

IE 7,8 and 9 Zero-Day Exploit

Posted: Tue Sep 18, 2012 9:23 am
by Tunnelcat
Yet another reason out of many to stick with Firefox or Chrome.

http://www.securityweek.com/new-interne ... oited-wild

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Tue Sep 18, 2012 11:09 am
by Krom
A web browser has a security vulnerability, what a shocking piece of news... :P

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Tue Sep 18, 2012 1:15 pm
by Isaac
Screw explorer.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Tue Sep 18, 2012 2:29 pm
by TigerRaptor
Firefox - NoScript

Chrome - ScriptNo

Less B.S to worry about.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Tue Sep 18, 2012 6:41 pm
by Jeff250
The problem with IE's security isn't that it has zero-day vulnerabilities but that you have to wait until the next patch Tuesday (at the soonest) for the fixes.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Wed Sep 19, 2012 1:03 am
by Sirius
They issue out-of-band updates for critical vulnerabilities (Iike this one). A fix should show up in the next few days from what I was reading.

And as Krom indicated, zero-day exploits aren't a new thing (and are not unique to IE either) - the world is not ending, security practices remain the same as before; avoid dodgy sites, don't click suspicious links, and you're extremely unlikely to be attacked by this. If that's not enough for you you can disable ActiveX entirely, or use a different browser. (Other browsers don't use ActiveX, which removes one attack surface, but there are still other ways to compromise them, so you still need to apply some common sense on the internet.)

IE9 isn't my primary browser, but that has a lot less to do with security than the fact that I really want certain Firefox extensions on my home PC. ABP is indeed one. Now if only they would do some sandboxing so a single lagging Flash page didn't kneecap everything...

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Wed Sep 19, 2012 11:09 am
by Grendel

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Fri Sep 21, 2012 11:01 am
by Sirius

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Fri Sep 21, 2012 2:29 pm
by Top Gun
Hmm, guess that's why I just needed to restart.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 4:01 pm
by Tunnelcat
You guys don't even want to hear the multitude varieties of curse words that are coursing through my head about IE and Microsoft right now. :rant:

An update finally comes out and I try to install that damn thing. Well, it gets to the 99% installed point and just sits there........and sits there........and sits there. I wait for ten minutes, bupkiss. So sh*t, I try to stop the installation. No joy. I try the task manager, it won't even open. I try the 3 fingered salute and the task manager finally comes up and I stop the Windows Update process. Then I try to reboot. It hangs saying not to shut off or unplug my machine because it's installing an update. Well, sh*t again, I wait a little longer. Still no joy. So, since my machine has a BIOS controlled hard reboot button, I force a reboot. It reboots just fine, but Windows Update still comes up saying I need to install the stupid update! Fat chance! I think MS rushed this little patch out a little too soon. Anybody else have this happen? I don't even want to try on my other 2 Windows 7 machines at the moment. &$%#^@ IE9, and I don't even use it!

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 6:44 pm
by Krom
No, my SSD chewed that update up in a few seconds (most of which was creating a restore point) and then rebooted without issue.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 8:24 pm
by TigerRaptor
tunnelcat wrote:I don't even use it!
That is what I said to myself one day and out it went.:P :lol:

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 9:16 pm
by Tunnelcat
Krom wrote:No, my SSD chewed that update up in a few seconds (most of which was creating a restore point) and then rebooted without issue.
If you have MSE on your system, do you disable it when you do a Windows Update????? I've never done this during past updates.

I think that's what caused my problem. When I went into the event log, besides a whole bunch of kernel errors from a forced reboot, there was one associated with MSE, specifically involving this error: Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D, which usually indicates that MSE was interrupted in progress and the file EppOobe.etl has been corrupted. Of course, that could have happened due to the forced shutdown, but who knows? So on a hunch, I then went and turned off MSE, went back to WU and had no problems installing the update this time, especially since it was already downloaded. I also had to delete that stupid .etl file so that MSE could repair it upon another reboot. Seems OK for the moment.

I also turned MSE off on another computer and that update worked without a hitch, AND it's got an even slower hard drive. If the problem is MSE, what a bunch of incompetents at Microsoft. You'd think that WU should know how to deal with MSE being active, or vice versa, during an update. :roll:

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 10:19 pm
by Krom
Actually I did have MSE running at the time...Forgot to uninstall it after spot checking some files. :P

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sat Sep 22, 2012 10:26 pm
by Spidey
It’s always advisable to turn off any security suites when installing software, but I never have any problems with WU either way.

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sun Sep 23, 2012 3:36 am
by roid
Installed an update to IE recently (might have been this one).
I was wondering why it's even nessesary.
The only time IE ever gets used is once on a new install - and it's to download another browser.

Can i uninstall it? i remember it being drilled deep into in past windows versions, is that still a thing?

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Sun Sep 23, 2012 2:09 pm
by Isaac
Isn't IE integrated with Windows' file manager?

Re: IE 7,8 and 9 Zero-Day Exploit

Posted: Mon Sep 24, 2012 8:52 am
by Foil
Krom wrote:No, my SSD chewed that update up in a few seconds (most of which was creating a restore point) and then rebooted without issue.
Same here. On my son's machine (an old P4) it took about four minutes to update and reboot, but my work rig (with an SSD) did the update and reboot in less than 25s.