Microsoft reveals another zero-day Internet Explorer flaw

Critical vulnerability affects all versions of Windows
Publish date:

Microsoft issued a warning regarding a major vulnerability in all versions of the firm’s Internet Explorer browser. The flaw potentially allows an attacker to take over a vulnerable computer.

The flaw resides with the Cascading Style Sheets functionality of the browsers and with code already having been published with exploits the flaw, adoption by malware authors is likely to appear imminently – particularly as the flaw affects even the newest version of Windows and IE.

Microsoft published information on how to protect systems from the flaw which involve using the firm’s Enhanced Mitigation Experience Toolkit 2.0. The inherent defence mechanisms of Windows 7 and Vista are rendered useless by the new exploit.

An easier solution, which Microsoft unsurprisingly didn’t feel compelled to suggest, is to use a browser other than Internet Explorer.