89 days of active zero/day exploit abuse in IE without an update available!

General Topics
1

Nice write up here from Brian Krebs: http://krebsonsecurity.com/2012/10/in-a-zero-day-world-its-active-attacks-that-matter/
Zero-days produced 89 days of free exploitable issues (3 zero/day exploits ) in IE without an update being available…
Similar situation we had for 2011 - 3 zero/days (CVE-2010-3971, CVE-2011-0094, CVE-2011-0096, CVE-2012-1875, CVE-2012-1889, CVE-2012-4969)

Last time such a situation occured for firefox was back in October 2010.
This while IE has a far better capability to secure their browser as the so-called alternative browsers ever will have…

polonus

2

I think I read about this before somewhere. :wink: (Thanks for reposting it pol.)