Page last updated at 23:17 GMT, Wednesday, 17 December 2008

Microsoft releases fix for IE

Microsoft Internet Explorer logo, file pic from 2004
Internet Explorer is used by the vast majority of computer users

Microsoft has issued a patch to fix a security flaw believed to have affected as many as 10,000 websites.

The flaw in Microsoft's Internet Explorer browser could allow criminals to take control of people's computers and steal passwords.

Internet Explorer is used by a majority of computer users and the flaw could affect all versions of it.

However, so far the vulnerability has affected only machines running Internet Explorer 7.

Security update MS08-078 would protect customers from active attacks against Internet Explorer, said the US software giant in a statement accompanying the release of the update.

"This update will be applied automatically to hundreds of millions of customers through automatic updates over the next few days," said Mike Reavey, director of the Microsoft Security Response Center (MSRC).

Potential danger

According to Rick Ferguson, a senior security adviser at security firm Trend Micro, the flaw has so far been used to steal gaming passwords but more sensitive data could be at risk until the security update is installed.

MICROSOFT SECURITY ADVICE
Change IE security settings to high (Look under Tools/Internet Options)
Switch to a Windows user account with limited rights to change a PC's settings
With IE7 or 8 on Vista turn on Protected Mode
Ensure your PC is updated
Keep anti-virus and anti-spyware software up to date
"It is inevitable that it will be adapted by criminals. It's just a question of modifying the payload the trojan installs," he said.

It is relatively unusual for Microsoft to issue what it calls an "out-of-band" security bulletin and experts are reading the decision to rush out a patch as evidence of the potential danger of the flaw.

Some experts have suggested that users switch browsers until the flaw is fixed.

Firefox, Opera, Chrome and Apple's Safari system are not vulnerable to this current flaw.

But Graham Cluley, senior consultant with security firm Sophos, said no browser is exempt from problems.

"Firefox has issued patches and Apple has too. Whichever browser you are using you have to keep it up to date," he said.

"People have to be prepared and willing to install security updates. That nagging screen asking if you want to update should not be ignored," he said.

Print Sponsor


SEE ALSO
Q&A: Stay safe online
17 Nov 08 |  Technology
Internet Explorer gets makeover
28 Aug 08 |  Technology
Web browser to get 'privacy mode'
21 Aug 08 |  Technology
Microsoft puts net at its heart
07 Mar 08 |  Technology
Net browser promises private surf
01 Sep 06 |  Technology

RELATED INTERNET LINKS
The BBC is not responsible for the content of external internet sites


FEATURES, VIEWS, ANALYSIS
Has China's housing bubble burst?
How the world's oldest clove tree defied an empire
Why Royal Ballet principal Sergei Polunin quit

BBC navigation

BBC © 2013 The BBC is not responsible for the content of external sites. Read more.

This page is best viewed in an up-to-date web browser with style sheets (CSS) enabled. While you will be able to view the content of this page in your current browser, you will not be able to get the full visual experience. Please consider upgrading your browser software or enabling style sheets (CSS) if you are able to do so.

Americas Africa Europe Middle East South Asia Asia Pacific