Microsoft Confirms Patch For Internet Explorer Zero-Day

Microsoft has confirmed it will issue an out-of-band patch to cover a zero-day flaw in Internet Explorer, excluding versions 9 and 10.

The memory corruption flaw was flagged at the start of the year, leading Microsoft to offer a workaround for users whilst it worked on a proper patch.

Yet researchers at vulnerability expert Exodus Intelligence found a way to easily get around the Fix It solution and thereby exploit the flaw.

Microsoft will be releasing a patch later today, which should see the problem eradicated entirely.

Internet Explorer getting  in a fix

“While we have still seen only a limited number of customers affected by the issue, the potential exists that more customers could be affected in the future.  The bulletin has a severity rating of Critical,” Microsoft noted in a blog post.

“We recommend that you install this update as soon as it is available. This update for Internet Explorer 6-8 will be made available through Windows Update and our other standard distribution channels.

“If you have automatic updates enabled on your PC, you won’t need to take any action.  If you applied the Fix it released in Security Advisory 2794220, you won’t need to uninstall it before applying the security update.”

Researchers have found a number of websites serving up exploits targeting the flaw, including US-based think-tank Council on Foreign Relations and Capstone Turbine, a US micro-turbine manufacturer.

Symantec suggested the Elderwood Group of hackers were exploiting the vulnerability. The collective was suspected to have been involved in the hit on Google in the famous Aurora attacks of 2009/10.

What do you know about online security? Try our quiz and find out!

Thomas Brewster

Tom Brewster is TechWeek Europe's Security Correspondent. He has also been named BT Information Security Journalist of the Year in 2012 and 2013.

Recent Posts

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

1 day ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

1 day ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago