Microsoft Internet Explorer Use-After-Free Vulnerability Being Actively Exploited

LauraR · Apr 28, 2014

Internet Explorer versions 6-11 vulnerable to remote code execution

A Zero-day vulnerability has been confirmed by Microsoft that involves IE6 through IE11. The vulnerability is a remote code execution vulnerability which exists in the way that Internet Explorer accesses an object in memory that has been deleted or has not been properly allocated.
Click to expand...

US government warning regarding an active exploit for those using Internet Explorer

http://www.us-cert.gov/ncas/current...t-Explorer-Use-After-Free-Vulnerability-Being

US-CERT is aware of active exploitation of a use-after-free vulnerability in Microsoft Internet Explorer. This vulnerability affects IE versions 6 through 11 and could lead to the complete compromise of an affected system.
US-CERT recommends that users and administrators enable Microsoft EMET where possible and consider employing an alternative web browser until an official update is available.
For more details, please see VU#222929.
Click to expand...

Vulnerability Note VU#222929

Microsoft Security Advisory 2963983

mdonah · Apr 28, 2014

LauraR said: ↑

US government warning regarding an active exploit for those using Internet Explorer

http://www.us-cert.gov/ncas/current...t-Explorer-Use-After-Free-Vulnerability-Being

Vulnerability Note VU#222929

Microsoft Security Advisory 2963983
Click to expand...

Thanks Laura. Those of us that bother to read the news posted here at MG's were made aware of the exploit yesterday. I've installed EMET on both my XP (IE8) and Vista (IE9) drives. But, I don't use IE anyway except when absolutely necessary (Microsoft catalog). I had to uninstall Secunia PSI and Weatherbug because they both use the IE engine.

LauraR · Apr 28, 2014

mdonah said: ↑

Thanks Laura. Those of us that bother to read the news posted here at MG's were made aware of the exploit yesterday. I've installed EMET on both my XP (IE8) and Vista (IE9) drives. But, I don't use IE anyway except when absolutely necessary (Microsoft catalog). I had to uninstall Secunia PSI and Weatherbug because they both use the IE engine.
Click to expand...

Thanks. I updated my post to include the MG's link. I've been gone on a college visit road trip with my oldest since Thursday and just got back, so did not see it on our site and saw it in the news. Figured it was definitely worth posting.

sexyandy81 · May 1, 2014

I have spoken to Microsoft and they think it's the heartbleed bug in the IE they told me to make sure the smartscreen filter is switched on and should be safe. In windows xp is to change to another browser as they don't do support anymore.

Blujay · May 1, 2014

LauraR said: ↑

Thanks. I updated my post to include the MG's link. I've been gone on a college visit road trip with my oldest since Thursday and just got back, so did not see it on our site and saw it in the news. Figured it was definitely worth posting.
Click to expand...

Definitely worth posting.

Thank you.

MrPewty · May 1, 2014

I read about this fix this morning and did my updates as they suggested. I'm assuming this is the fix for the issue you describe. Please correct me if I'm wrong.

http://blogs.technet.com/b/microsof...g-internet-explorer-and-driving-security.aspx

LauraR · May 1, 2014

MrPewty said: ↑

I read about this fix this morning and did my updates as they suggested. I'm assuming this is the fix for the issue you describe. Please correct me if I'm wrong.

http://blogs.technet.com/b/microsof...g-internet-explorer-and-driving-security.aspx
Click to expand...

Nice to know. Thanks.

I'm glad to read this:

Even though Windows XP is no longer supported by Microsoft and is past the time we normally provide security updates, we’ve decided to provide an update for all versions of Windows XP (including embedded), today. We made this exception based on the proximity to the end of support for Windows XP.
Click to expand...

Log in or Sign up

Microsoft Internet Explorer Use-After-Free Vulnerability Being Actively Exploited

LauraR MajorGeeks Super-Duper Administrator Staff Member

mdonah Major Geek Extraordinaire

LauraR MajorGeeks Super-Duper Administrator Staff Member

sexyandy81 MajorGeek

Blujay Specialist

MrPewty MajorGeek

LauraR MajorGeeks Super-Duper Administrator Staff Member