lswcap
US-CERT, the Department of Homeland Security’s information security division, reported that a web browser Internet Explorer had a remote code execution vulnerability and warned that an attack using this vulnerability has already occurred.
Microsoft has said it will provide a fix patch, but it is not known whether the patch will be available for Internet Explorer on Windows 7, which recently stopped supporting. This vulnerability can effectively take over the system by destroying the memory used by the Internet Explorer 9-11 script engine and executing arbitrary code.
US-CERT recommends taking a solution, such as temporarily restricting access to’jscript.dll’ used by Internet Explorer. Meanwhile, Microsoft has started developing the patch, but it is said that it is unlikely that the revision will be reflected until the next monthly security update scheduled on February 11, rather than an emergency response. Also, Microsoft did not comment on details such as who US-CERT is targeting the attacker who exploited this vulnerability.
So now Internet Explorer users should take care not to use script engines as US-CERT says, and self-defense against visiting dubious websites. Most of all, Microsoft already announced its Chrome-based Edge browser a while ago, and it’s clear that it doesn’t care about the outdated Internet Explorer. Internet Explorer’s share is already a few percent below Chrome, Firefox, and Edge. Regardless of the vulnerability, if there is no inevitable reason, it is better to use a modern browser such as Chrome, Firefox, or Edge. Related information can be found here .
Add comment