Guess what time it is…
by Brian on Jul.29, 2009, under Windows Info
Give up?
It’s time to upgrade your version of Windows!!
http://www.us-cert.gov/cas/techalerts/TA09-209A.html
If you don’t know what that means, you’re in trouble. Yes, you.
Basically what this says is that EVERY version of Internet Explorer on every version of Windows is vulnerable to a Remote Code Execution exploit. (in English, that means that Mr. Bad Guy can run *ANY* program he wants on your computer with full administrative privileges. This of course, being in direct violation of Rule #1 of the 10 Immutable Laws of Computer Security.)
The patches will implement a kill-bit, and disable parts of COM and ActiveX controls, p(robably)ossibly breaking legacy applications.
The solution?
Run out ->don’t walk<- and buy the latest copy of
the Microsoft Windows 7 Operating System.
Oh.
Sorry.
You can't get it, just... yet...
It's coming, though.. Microsoft Partners will see it in about 2 weeks, and it will be available to the general public some time in October.
The attack vectors are not only via Internet Explorer. Any application (such as MS Office) with access to ActiveX and/or COM objects can exploit this vulnerability.
Here’s the bulletin. Extensive testing is suggested if you use ActiveX controls or COM objects in mission-critical applications.