200 url's with code exploit IE flaw

General Topics
1

Hello forum members,

200 url’s were found with code inserted to exploit an IE flaw, that may exist until April 11th.

http://www.pcworld.com/news/article/0,aid,125228,00.asp

solution see here:
http://www.securityfocus.com/bid/17196/solution

polonus

2

Solution:
The Internet Explorer 7 Beta 2 Preview released on March 20, 2006 is not affected by this vulnerability.
Simply use the most current version of IE to not be effected.
IMHO, Unless specifically instructed, you should always use the most recent version of any software.
There are usually reasons why a company make changes in their software. Security related issues are quite often one of them.

3

This is not the most recent version of IE, Bob, it’s a beta version. It certainly doesn’t come down automatic updates.

Whether or not the latest version of IE7 isn’t vulnerable by design or by fluke I don’t know, but at least it is a thread of comfort to those who have been reciting the credo that IE plus SP2 equals absolute security.

And installing a beta version of a product which may itself contain undiscovered vulnerabilities to patch a program with a security hole is a bit of a tenuous proposition to me…

Far better to use an alternative browser like Opera or Firefox which isn’t vulnerable.

4

Hi FwF,

Yes why is it, the vulnerability window is always slightly ajar, where IE is concerned?

polonus