IE exploit shocker

[Paul]

Well not really a shock, just another IE exploit
Eweek

Microsoft late Thursday confirmed a security flaw in its dominant Internet Explorer browser could be potentially exploited by malicious hackers to take "take complete control of the affected system."
The software giant released a security advisory acknowledging the vulnerability and recommended that IE users set Internet and local intranet security zone settings to "High" before running ActiveX controls in these zones.
All supported versions of Internet Explorer, including IE 6.0 in Windows XP SP 2 (Service Pack 2) are affected.
Microsoft Corp.'s confirmation comes less than 24 hours after private security research firm SEC Consult published a working exploit to show that the bug could crash the browser or exploited to execute arbitrary code in the context of IE.
Microsoft said it was not aware of any attacks attempting to use the reported vulnerability or customer impact and promised a patch would be made available once an investigation is completed.

[AndrewJ]

They done well about a week since last one.

[Gareth]

Tsk, El Reg is only just reporting this one today... they should read CF more often

[iron25]

...take complete control of the affected system


Okay, could anyone on this forum put their hands up if their system was completely taken control of by a hacker after they browsed the internet using Internet Explorer.

[AndrewJ]

Not me in fact since I have used IE6 mainly for past 4years online I have never been hijacked browser wise, the most I have had is a homepage hack easily sorted with spybot and normal safe mode stuff.

[Gareth]

You may not consider it important, but personally I'm very interested in this. My job is in IT security for a very prominent UK building society (those from Swindon will know which one ) and this is the sort of thing I get paid to know all about. Considering the number of members we have that use internet banking, and considering the proportion of those that use IE, it is essential to be aware of all potential exploits - whether they've been seen in the wild or not.
__________________

but, saying that, spyware/malware authors and the programmers at MS that wrote IE with so many bugs in it, are really keeping me in a job, so maybe I should thank them