The network has started a code, which can be used to break into computers with older versions of the browser Microsoft Internet Explorer. This code, on Friday appeared in the Bugtraq mailing from an unknown source. According to the manufacturer of antivirus software, the company Symantec, the code does not always work properly, however it can be used to install unauthorized software on the computer-sacrifice. "Symantec has tested and confirmed that it affects Internet Explorer versions 6 and 7", ─ wrote a manufacturer on its website on Saturday. ─ "We believe that in the near future will be available a fully functional robust code.
Vupen Security Consultants Company also confirmed that the code is valid, saying that he works under the operating system Windows XP Service Pack 3 with IE6 or IE7. No company could not confirm that the attack would reach goal on the last version of the browser Microsoft, IE8. Representatives of Symantec not told that this code is used by cyber-criminals, but because of the popularity of the Internet Explorer browser such code is very like hackers. If the code suddenly appears in network attacks, the company Microsoft will release an emergency patch, to monthly security update, which is expected on December 8. Microsoft officials have not yet comment on the matter. The total percentage of browsers IE6 and IE7 currently stands at about 40% of the browser market.
The problem is, how Internet Explorer receives certain objects Cascading Style Sheet (CSS), used to create a standardized layout of web pages. To make the code worked, according to Symantec, the hacker must be targeted to lure the victim to a Web page that contains encoded JavaScript. This technique in recent years has become one of the most common ways to install malicious software on computers. "To reduce the chances of occurrence of such problems, users of Internet Explorer should regularly update anti-virus database, disable JavaScript, and visit only those Web sites they trust, so long as they do not install the patch from Microsoft", ─ says Symantec.



Reply With Quote
Copyright Techfuels
Bookmarks