Microsoft Warns About IE Security Flaw

After a publication of an attack code for a zero-day vulnerability, Microsoft has issued a warning for its Windows users.

Akin to a server-side cross-site scripting (XSS) vulnerabilities, the flaw enables the attacker to run codes when a malicious webpage is loaded in the same security context as Internet Explorer. It exists due to MHTML’s manner of interpreting some MIME-format requests for document portions.

Read the rest of the article »

Malicious CSS Codes Threaten Internet Explorer

Microsoft has just issued a warning about an un-patched zero-day vulnerability of their browser Internet Explorer which leaves Windows open to attacks. The case, which was discussed in Microsoft’s Security Advisory 2488013, relates to Internet Explorer’s handling of malicious Cascading Style Sheet (CSS) code. This can be exploited to overwrite uninitialized memory and execute arbitrary code.

The flaw can be exploited via remotely run code under the account of the user by simply visiting a CSS webpage that contains the malicious code. Unfortunately, there is no fix yet, although Microsoft reports that they’re investigating the issue.

Read the rest of the article »

The Downfall of Internet Explorer

Internet Explorer once dominated the web is now dipped in the mud. As the recent data from StatCounter shows, IE is now below the once 50% mark in the Internet browser market. In August, IE was 51.34%, but by the end of September it’s just holding a 49.87%. It dropped 10% yearly.

Meanwhile, growth from Firefox and Chrome are coming to its peaks.

Microsoft’s latest version IE9 addresses the issues that made them lose before. The company realized the need for compliance to web standards. Even if their advances are not small, it’s still late.

We are dutifully impressed about the IE9 but unlucky it doens’t hit the mark.

Read the rest of the article »