Security Vulnerability In Windows Internet Explorer

Background



Recently Microsoft discovered vulnerability in Internet Explorer (IE) on all currently supported versions of Windows.

The vulnerability enables unauthorized third parties to take control of IE users' computer by tricking them to visit Web sites tainted with malicious programming code.


Microsoft Action



*Microsoft is scheduled to release a security bulletin update (out-of-band) at approximately 10 A.M. Pacific Time on Wednesday, December 17, 2008 in an effort to protect customers.

*Microsoft recommends that customers prepare their systems and networks to apply this security bulletin update immediately once released to help ensure that their computers are protected from attempted criminal attacks.


Resolution Expert Action



*Resolution Experts should advise the customers to update anti-virus on their system.

*Resolution Experts should reset IE to run in protected mode (default mode) in Windows Vista but not in Windows XP and earlier versions of windows.

*Resolution Experts should Set zone security to high.

*Resolution Experts should ensure Windows is updated or perform this manually through Windows updater or set it to automatic updates.



For more information, please see

Microsoft TechNet Security - Microsoft Security Bulletin Advance Notification for December 2008

Microsoft Protect - Get Security Support