Download the Tom's Hardware App from the App Store
The reference for current tech news
Yes No
Ads

Google Issues Security Alert for IE Users

by - source: InformationWeek

Patch soon or you might get socially-hacked.

Google has issued security alerts to Windows users who using Internet Explorer as their main browser. IE, which in some cases is very tied into the operating system like Windows XP, is said to have been the target of politically-motivated attacks. According to Google reps, users of IE are open to attacks through a popular social networking site. Google declined to name the site specifically, but stood by its warning.

At this time, there is no permanent fix for the security hole, but Google heeds that users apply a temporary fix from Microsoft as soon as possible.

According to Microsoft, the security hole lies in the way IE handles MHTML, which could lead to an exploit disclosing private information.

Microsoft said in in its advisory:

Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities.

Google said that it has deployed server-side changes to help combat the exploit:

To help protect users of our services, we have deployed various server-side defenses to make the MHTML vulnerability harder to exploit. That said, these are not tenable long-term solutions, and we can’t guarantee them to be 100% reliable or comprehensive. We’re working with Microsoft to develop a comprehensive solution for this issue.

The MHTML exploit exists in all versions of Windows.

Share:
23
Comments
X
Submit

Comments
Add your comment
Ciuy 03/14/2011 8:15 PM
Hide
--2+

who the hell uses IE ????

nebun 03/14/2011 8:16 PM
Hide
-1+

it looks like google created the bug, lol

trialsking 03/14/2011 8:21 PM
Hide
-0+

I am totally shocked! A security alert for using IE!?!?!??! How could this be possible!?!?!?!!?
/sarcasm

Netherscourge 03/14/2011 8:34 PM
Hide
--2+

Translation: Don't use IE9 when it comes out this week - use Google Chrome.

AKA - A poorly veiled advertisement.

I'm no IE fan, but Google seriously needs to relax and just worry about their own products.

Netherscourge 03/14/2011 8:37 PM
Hide
-0+

Also - why is Google afraid to say FACEBOOK?

See, it's not that hard!

FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK


Or more likely, Farmville? Everyone knows Farmville is compiling our Facebook status updates to brainwash our shopping tendencies.

Anomalyx 03/14/2011 8:54 PM
Hide
--3+

nebun :
it looks like google created the bug, lol


Looks like you have no clue what you're talking about. Or didn't read the article at all. Or both.

Clever advertising on Google's part, though. However, they failed to realize that people fall into one of 2 categories: 1) those who already don't use IE, and 2) those who don't care about security even if you were to hack their Facebook and send them a message from themselves. As long as they can water their crops, they don't care who has their passwords.

treefrog07 03/14/2011 9:51 PM
Hide
-0+

IE is good for MS updates, but I like Firefox for normal web-surfing.

Anonymous 03/14/2011 10:16 PM
Hide
-1+

Using IE will make you scream "Ayeeeeeee" in pain.

otacon72 03/14/2011 10:53 PM
Hide
-2+

Anomalyx :
Looks like you have no clue what you're talking about. Or didn't read the article at all. Or both.Clever advertising on Google's part, though. However, they failed to realize that people fall into one of 2 categories: 1) those who already don't use IE, and 2) those who don't care about security even if you were to hack their Facebook and send them a message from themselves. As long as they can water their crops, they don't care who has their passwords.



Google should worry about their own garbage browser and less about MS. FF sucks too since he can't handle Flash.

someguynamedmatt 03/14/2011 11:07 PM
Hide
-3+

Ciuy :
who the hell uses IE ????


Everyday users who aren't computer savvy. Which makes up basically most of the general population.

xerroz 03/14/2011 11:44 PM
Hide
--1+

Google are such weasels, what? they think I can see right through them? this is just publicity for their shitty google chrome browser and to shit on IE

mayne92 03/15/2011 12:03 PM
Hide
--2+

otacon72 :
Google should worry about their own garbage browser and less about MS. FF sucks too since he can't handle Flash.


You post nothing but negative garbage on here and on ESPN. Just in case you didn't know that LOL

mayne92 03/15/2011 12:11 PM
Hide
-0+

xerroz :
Google are such weasels, what? they think I can see right through them? this is just publicity for their shitty google chrome browser and to shit on IE


So if a web developer told you that IE actually sucks in everything from experience...you would think I was out to get IE? lol

K2N hater 03/15/2011 1:45 AM
Hide
-1+

otacon72 :
FF sucks too since he can't handle Flash.


Firefox won't ship with closed-source plugins. You must install Flash on your own and at your risk.

Tip: if IE is as vulnerable as Google claims then Flash alone is 5x as much as vulnerable.

JOSHSKORN 03/15/2011 1:53 AM
Hide
--1+

Or don't use IE. Download Firefox instead. It has a 64-bit browser, at least in BETA (called Minefield). Most computers that come out today run on a 64-bit OS. a 32-bit browser works, but it doesn't make use of your computer's full potential. Oh, and Adobe has a version of Flash for this as well. Do your research. Problem solved.

jimmysmitty 03/15/2011 3:52 AM
Hide
-1+

JOSHSKORN :
Or don't use IE. Download Firefox instead. It has a 64-bit browser, at least in BETA (called Minefield). Most computers that come out today run on a 64-bit OS. a 32-bit browser works, but it doesn't make use of your computer's full potential. Oh, and Adobe has a version of Flash for this as well. Do your research. Problem solved.



Um IE has had a 64bit browser since IE8 if I remmeber correctly. And I have used it before.

Still It doesn't say which version of IE is affected but I am going to go out on a limb and say IE8 and lower since IE9 is not technically official.

So I laugh at Google and honestly, Chrome is meh. I have tried it. I am not a fan of it since Google likes to install other awesome stuff like Google Update that CONSTANTLY runs in the background. Talk about a security hole.

Either way. I am fine with IE9 and FF 4.

ltbob 03/15/2011 4:15 AM
Hide
--1+

FF4 FTW

meh I tried chrome its grate but I like the bulkyness of FF :)

robd007 03/15/2011 7:12 AM
Hide
-0+

there was an article explaining why the 64-bit version of IE wasnt not nearly as fast as the 32-bit version...not sure if that holds true for FF

iboomer 03/15/2011 3:00 PM
Hide
-1+

jimmysmitty :
Um IE has had a 64bit browser since IE8 if I remmeber correctly. And I have used it before.Still It doesn't say which version of IE is affected but I am going to go out on a limb and say IE8 and lower since IE9 is not technically official.So I laugh at Google and honestly, Chrome is meh. I have tried it. I am not a fan of it since Google likes to install other awesome stuff like Google Update that CONSTANTLY runs in the background. Talk about a security hole.Either way. I am fine with IE9 and FF 4.



Yeah, well, IE 8 is the current version so that doesn't say much.

Yeah, the MS alert says that it is across all windows platforms, which me all versions of IE.

I love the fanboi's around here. FF sucks, Chrome sucks, IE sucks. Why don't you people get a life. I use IE, because everytime I install one of the others, it doesn't do what it was advertised to do (for me). If I have to do a bit of extra work to keep IE clean, so be it.

Zomby 03/15/2011 4:53 PM
Hide
-1+

Ciuy :
who the hell uses IE ????



Most people do actually. Including tech savvy people, unlike what some people whant to think. Just because someone prefers a specific browser doesn't mean every other one sucks. I've been a web developper for years and I can tell you that every single browser suck at something.

eyemaster 03/15/2011 6:46 PM
Hide
-1+

Ciuy :
who the hell uses IE ????


Oh, I don't know, maybe about 70% of the users of the internet?

mister g 03/19/2011 5:08 PM
Hide
-0+

JOSHSKORN :
Or don't use IE. Download Firefox instead. It has a 64-bit browser, at least in BETA (called Minefield). Most computers that come out today run on a 64-bit OS. a 32-bit browser works, but it doesn't make use of your computer's full potential. Oh, and Adobe has a version of Flash for this as well. Do your research. Problem solved.


Like Jimmy said IE8 comes in both 32-bit and 64-bit flavors, on Windows 7 64-bit it came with both. I use the 32-bit version cuz Adobe promised a final 64-bit version at some point in the future (about a year ago) and it's still in beta.

Ads

Best offers

Newsletters


OK
Ads