Sep 18, 2012
A security researcher who lives in Luxembourg accidentally uncovered a flaw in Microsoft’s Internet browser. The flaw was discovered after Eric Romang’s PC got infected by the Posion Ivy virus. This virus was known to exploit a zero-day flaw in Microsoft Internet Explorer that would compromise your personal information residing on your computer. Also it was known to take control of the victim’s PC after the infection.
Microsoft already discovered the bug and advises Internet Explorer users to fix it by downloading a piece of security software that will temporarily patch the hole until a permanent fix is deployed. You can download the security tool for free that is known as Enhanced Mitigation Experience Toolkit or EMET on one of Microsoft’s website. After downloading you must install the software and configure it properly for the ‘fix’ to work. If you will be successful, Microsoft also warns that doing so might impact your PC’s usability.
As an alternative solution, IE users were told to just switch browser by using Chrome, Firefox or Opera software a method that is considered much easier and more convenient. This will avoid all the complexities and incompatibilities in configuring and using Microsoft’s EMET.
“For consumers it might be easier to simply click on Chrome,” — Dave Marcus, director of advanced research and threat intelligence with Intel Corp’s McAfee security division.
According to Marc Maiffret (chief technology officer of the security firm BeyondTrust), using EMET might not be feasible for businesses that could block the normal system flow because of software incompatibilities.
“Any time you see a zero-day like this, it is concerning. There are no patches available. It is very difficult for people to protect themselves.” — Liam O Murchu, a research manager in Symantec Corp.
Update: Sept. 20 2012 Microsoft already release a portable tool that will provide the patch for the zero-day vulnerability affecting all versions of Internet Explorer in all recent versions of Windows operating system. After downloading the tool, run the program and follow the instructions provided. Take note that this will only work on 32-bit version of Internet Explorer. The name of the tool is Fix-It and you can download it here.