Barney's Blog

Blog archive

Hackers Given Keys to IE 7 Kingdom

I'm a fan of how public Microsoft is with its security flaws. Patch Tuesday is a tradition that Microsoft should be proud of -- not for the holes, but for the public fixes.

But patches are like blueprints for a hacker, who can now understand the hole and attack unpatched systems. That's what's happening with IE 7 as hackers take the hole disclosed earlier this month and go after it with gusto.

The vulnerability is that hackers can use deleted data, like the history and cookies, as a vector of attack. The fix is in; some of you might as well get it.

Posted by Doug Barney on February 20, 2009 at 11:53 AM


Featured

  • Windows Autopilot for HoloLens 2 Hits Preview

    Windows Autopilot, Microsoft's PC self-provisioning program, is now being tested for use with the company's mixed-reality headset, the HoloLens 2.

  • Signs Point to Microsoft Charging for Use of APIs

    There are indications that Microsoft is mulling charging customers for software that uses its application programming interfaces.

  • The 2020 Microsoft Product Roadmap

    From the next major update to Windows 10 to the next generations of .NET and PowerShell, here's what's on tap from Microsoft this year.

  • Microsoft Extends Azure Hybrid Benefit Licensing to Linux

    Microsoft has expanded its Azure Hybrid Benefit licensing program to include Linux servers, particularly Red Hat Enterprise Linux or SUSE Linux Enterprise servers.