Box of Meat

biggest Internet Explorer flaw since PEBKAC

MetaFilter has a lively conversation about how “Users of the world’s most common web browser (good old IE!) have been advised to switch to a rival until a serious security flaw has been fixed.”  This flaw exists in versions 5, 6, and 7.

“The flaw essentially originates from the improper handlings of DHTML data bindings due to a memory corruption error. Though the hackers have been exploiting the vulnerability for more than a week, the company notified an upswing in attacks over the weekend.”

ZDNet’s Zero Day and the Washington Post’s Security Fix are both reporting that Microsoft will ship an emergency fix tomorrow.

But, don’t wait: get Firefox.

• Internet Explorer security alert
• Serious security flaw found in IE (BBC)
• Internet Explorer security alert: Microsoft says all users at risk

16 December 2008
15:03

biggest Internet Explorer flaw since PEBKAC