resource center
  See your link here
|
IDG News Service -
Microsoft Corp. has released software that can be used to mitigate a critical vulnerability in Internet Explorer that was first reported last week.
The bug, which concerns the way Internet Explorer handles ActiveX components, can cause the browser to crash and could be used by an attacker to run unauthorized software on the user's machine, Microsoft said.
Yesterday, Microsoft released software that in the registry disables a file called Javaprxy.dll, which is used to run these components in Internet Explorer. This file is used by the Microsoft Java Virtual Machine, the company said.
Microsoft has not yet decided whether it will release a software patch that would fix the underlying problem, a spokeswoman said. "The work-around that they've offered here doesn't fix the underlying vulnerability, but it removes the functionality," she said.
Danish security company Secunia gave the vulnerability its most serious rating, calling it "extremely critical."
The Austrian security researchers who discovered the flaw expect Microsoft eventually to issue a full-blown patch.
"Right now, it's not that dangerous," said Martin Eisner, chief technical officer at security consulting company SEC Consult Unternehmensberatung GmbH. "But of course within a couple of weeks there will be somebody who has a little bit more time than we have and there will be an exploit then," he said in an interview last week.
Microsoft is unaware of any software that has exploited the bug, the spokeswoman said.
Microsoft has issued a security advisory that provides more details on the bug and lists other possible work-arounds to the problem.
IDG.net
Maximizing website Return on Information with high-quality search
Download this whitepaper explaining how an investment in site search can boost your earnings while reducing customer service costs.
Key Strategies for Managing Data Growth
What are you storage challenges?
Red Hat Continues to Redefine SOA: SIMPLE. OPEN. AFFORDABLE.
SOA enables enterprises to accelerate business execution while driving higher quality and customer satisfaction.
Extending Client Refresh - 11 Steps to Maximize Savings
Register Now!
Open Source Middleware Reference Architecture
A roadmap of open source software capabilities across a diverse set of application requirements.
Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!
Understanding the Business Benefits of an Open Source SOA Platform
Address the serious business challenges that SOA helps to overcome.
Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!
Enterprise Acceleration
Best practices to help IT developers become more productive.
Consolidate Your Servers and Storage to Lower Costs with Oracle Database 11g
Register for this webcast!
Sign up to receive updates on the latest Development resources
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDC
IDG
IDG Connect
IDG Knowledge Hub
IDG TechNetwork
IDG Ventures
IDG.net
InfoWorld
ITwhitepapers
ITworld
JavaWorld
LinuxWorld
Macworld
Network World
PC World
The Industry Standard
Copyright © 1994 - 2009 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission ofComputerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc. |
