Microsoft To Fix Critical IE Bug

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
Microsoft says it plans to fix a six month old bug in Internet Explorer 8 that allows attackers to hijack your rig just by visiting a compromised site.

First of all, what was published is an advisory, not an exploit. The advisory contains *some* details about the bug, but rest assured, it won’t be easy reproduce the vulnerability based on the advisory alone. In other words, what has been disclosed is the fact that there’s a bug in IE and that it has not been patched (yet) after 180 days.
Click to expand...
 
When is End Of Support for IE8?

I'm thinking it can't be that much longer...Though this problem will likely still stick for large enterprise systems for some time to come.
 
IE8 comes with Windows 7 so support for it probably ends when support for Windows 7 ends.

Satyrist said:
When is End Of Support for IE8?

I'm thinking it can't be that much longer...Though this problem will likely still stick for large enterprise systems for some time to come.
Click to expand...
 
Chrome and Firefox perform a single fix by upgrading the version. Microsoft performs a fix by apply the fix across all versions. What the hell are they thinking?

Their argument, oh well shitty devs built support around IE6/7/8. Well not if you force them to upgrade they wont! Let them worry about it.
 
Azzkiker said:
180 days is a long time...
Click to expand...

Maybe a small amount, but not by much. You found out about a bug, then have to research how to fix it. then have to research how your fix might affect anything else that uses that same function. Then have to test to make sure that everything works fine.

When it come to updates you are damned if you do, damned if you don't.

If Microsoft released a patch after 1 day that caused 10% of computers to crash every 3 hours and reboot. There would be a massive uprising. Same for if a one day patch just made it so that you could no longer open any secure pages.

Years ago (4 or 5 I think) there was a bug that Microsoft tried to quickly fix and released a patch within a few days of them finding out about it. However this also meant they didn't test the patch. It had a flaw in it that caused a large number of realtek NICs to no longer work. this actually brought down a lot of offices (ABC being one of them) that had their computers set to download and install updates and happen to have all Realtek onboard NICs.

People were extremely pissed off that Microsoft released a patch and didn't test it which resulted in massive network outages and IT departments rushing to get everything back up and running. But they patched the original issue thought and did it quickly. Nobody cared about that part of it. Given how much IE ties into other parts of windows, and even visual studio products, they have to be careful when releasing any type of change to ensure that they aren't going to cause some other issue. Which means proper testing of everything that touches IE code and ensuring all of that works.
 
BurntToast said:
Chrome and Firefox perform a single fix by upgrading the version. Microsoft performs a fix by apply the fix across all versions. What the hell are they thinking?

Their argument, oh well shitty devs built support around IE6/7/8. Well not if you force them to upgrade they wont! Let them worry about it.
Click to expand...
Those shitty devs tend to be in enterprise and they designed them for IE6/7/8 when 6/7 or 8 was actually the current version of IE. Enterprise would hate to pay every time an update breaks their in house tools, which is why enterprise still uses IE6/7/8 because chrome and firefox won't support their old versions like that, plus group policies.

The customer is always right...
 
You must log in or register to reply here.
Back
Top