Newsletter Sign-Up

Receive the latest technology news and information.

Microsoft offers work-around for IE vulnerability

Flaw can cause browser to crash

By Robert McMillan

July 6, 2005 12:00 PM ET

IDG News Service - Microsoft Corp. has released software that can be used to mitigate a critical vulnerability in Internet Explorer that was first reported last week.
The bug, which concerns the way Internet Explorer handles ActiveX components, can cause the browser to crash and could be used by an attacker to run unauthorized software on the user's machine, Microsoft said.
Yesterday, Microsoft released software that in the registry disables a file called Javaprxy.dll, which is used to run these components in Internet Explorer. This file is used by the Microsoft Java Virtual Machine, the company said.
Microsoft has not yet decided whether it will release a software patch that would fix the underlying problem, a spokeswoman said. "The work-around that they've offered here doesn't fix the underlying vulnerability, but it removes the functionality," she said.
Danish security company Secunia gave the vulnerability its most serious rating, calling it "extremely critical."
The Austrian security researchers who discovered the flaw expect Microsoft eventually to issue a full-blown patch.
"Right now, it's not that dangerous," said Martin Eisner, chief technical officer at security consulting company SEC Consult Unternehmensberatung GmbH. "But of course within a couple of weeks there will be somebody who has a little bit more time than we have and there will be an exploit then," he said in an interview last week.
Microsoft is unaware of any software that has exploited the bug, the spokeswoman said.
Microsoft has issued a security advisory that provides more details on the bug and lists other possible work-arounds to the problem.

Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Jump to comments

Web Services

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Maximizing website Return on Information with high-quality search
Download this whitepaper explaining how an investment in site search can boost your earnings while reducing customer service costs.

Key Strategies for Managing Data Growth
What are you storage challenges?

Red Hat Continues to Redefine SOA: SIMPLE. OPEN. AFFORDABLE.
SOA enables enterprises to accelerate business execution while driving higher quality and customer satisfaction.

Extending Client Refresh - 11 Steps to Maximize Savings
Register Now!

Open Source Middleware Reference Architecture
A roadmap of open source software capabilities across a diverse set of application requirements.

Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!

Understanding the Business Benefits of an Open Source SOA Platform
Address the serious business challenges that SOA helps to overcome.

Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!

Enterprise Acceleration
Best practices to help IT developers become more productive.

Consolidate Your Servers and Storage to Lower Costs with Oracle Database 11g
Register for this webcast!

All White Papers | All Webcasts

Computerworld Reports

8 Questions To Ask About Your Intrusion-Security Solution

Computerworld Technology Briefings IT Service Management

Computerworld Briefing - Analytics: The Art and Science of Better

All Computerworld Reports

	Application/Web Development
	Web Services/SOA
	Computerworld Daily News (First Look and Wrap-Up)
	Computerworld Blogs Newsletter
	The Weekly Top 10
	Cloud Computing

resource center