IE security flaw fixed

Microsoft has delivered the fix for the zero day vulnerability in Internet Explorer. The update is known as MS08-078  which addresses a vulnerability in Internet Explorer (KB 960714).

• Follow this link to download the update.
• Click here to see the details of this knowledgebase article KB 960714.

According to the BBC

The AZN Trojan has been making the rounds since the beginning of December but became public knowledge in the last week . Unlike other exploits, users only have to visit a malicious site with Trojans or other malware in order to become contaminated.

Microsoft developed a patch for the "Zero day" flaw in record time

Once an infected web page is opened, malicious downloaders are installed on the computer designed to record keystrokes and steal passwords, credit card details and other financial information.

The sites affected are mostly Chinese and have been serving up programmes to steal passwords for computer games which can then be sold for cash on the black market.

Internet Explorer is the world's most widely used web browser with nearly three quarters of the market share.

Microsoft estimated that one in every 500 Windows users had been exposed to sites that try to exploit the flaw and the number of victims was increasing at a rate of 50% daily.

Researchers at the software security firm Trend Micro said attacks were spreading "like wildfire".

"This vulnerability is being actively exploited by cyber-criminals and getting worse every day," said the company's advanced threat researcher Paul Ferguson.

Microsoft labelled the bug as "critical," the most serious threat ranking in its four-step scouring programme.