Microsoft At Ends With New Internet Explorer Security Issues
Posted on | December 16, 2008 | No Comments
“Change Browsers” is all that seems to be released regarding the newest Microsoft Internet Explorer security vulnerability. They can’t exactly “fix” the problem, so they are suggesting you do the next best thing: just stop using Internet Explorer altogether. A bit dramatic, ay?
Users have been encouraged to use the Firefox, Opera, Chrome and Safari browsers by security experts, as they are not vulnerable to the flaw Microsoft has identified.
The other browser companies must be really enjoying this, huh? Google even took its browser out of beta. Lucky move or strategic?
Here is what Microsoft suggests as a “mini” (AKA: Not working) work around for the Internet Explorer (ALL versions of Microsoft Internet Explorer):
Which of the workarounds should I apply to my system in order to be protected?
Based on our investigation, setting the Internet zone security setting to High will protect users from known attacks. However, for the most effective protection, customers should evaluate a combination of using the High security setting in conjunction with one of the following workarounds.
• Disable XML Island functionality
• Restrict Internet Explorer from using OLEDB32.dll with an Integrity Level ACL
• Disable Row Position functionality of OLEDB32.dll
• Unregister OLEDB32.dll
• Use ACL to disable OLEDB32.dll
For additional workaround details, please see the following post: http://blogs.technet.com/swi/archive/2008/12/12/Clarification-on-the-various-workarounds-from-the-recent-IE-advisory.aspx#workarounds.
If this doesn’t make Microsoft step it up a COUPLE notches and make it seriously re-think the way Internet Explorer 8 is going to work, I really don’t know what is. You have all these big names just full out suggesting to stop using your product. When they realize how much better the other products are compared to the one they’ve been using this whole time, why would they even bother switching back once you “have the problem fixed”?
This situation is extremely interesting in my eyes. I take a huge interest in watching before and after scenarios; especially “online related” scenarios. The current market share of Internet Explorer is about 69%… wonder what its going to be after this.Let’s see if “big news” makes a big ding in IE’s market share.
As mentioned above: This security issue is for all versions of Microsoft Internet Explorer. Internet Explorer 5, Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 BETA… and everything in between.
For those that are still using Internet Explorer, have you switched? Are you going to stick with IE even after they “patch” this up?
Microsoft / SC Magazine / Washington Post
Comments
Leave a Reply