Sign in with
Sign up | Sign in

Google Issues Security Alert for IE Users

By - Source: InformationWeek | B 21 comments

Patch soon or you might get socially-hacked.

Google has issued security alerts to Windows users who using Internet Explorer as their main browser. IE, which in some cases is very tied into the operating system like Windows XP, is said to have been the target of politically-motivated attacks. According to Google reps, users of IE are open to attacks through a popular social networking site. Google declined to name the site specifically, but stood by its warning.

At this time, there is no permanent fix for the security hole, but Google heeds that users apply a temporary fix from Microsoft as soon as possible.

According to Microsoft, the security hole lies in the way IE handles MHTML, which could lead to an exploit disclosing private information.

Microsoft said in in its advisory:

Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities.

Google said that it has deployed server-side changes to help combat the exploit:

To help protect users of our services, we have deployed various server-side defenses to make the MHTML vulnerability harder to exploit. That said, these are not tenable long-term solutions, and we can’t guarantee them to be 100% reliable or comprehensive. We’re working with Microsoft to develop a comprehensive solution for this issue.

The MHTML exploit exists in all versions of Windows.

Discuss
Display all 21 comments.
This thread is closed for comments
  • -2 Hide
    Ciuy , March 14, 2011 6:15 PM
    who the hell uses IE ????
  • 1 Hide
    nebun , March 14, 2011 6:16 PM
    it looks like google created the bug, lol
  • 0 Hide
    Trialsking , March 14, 2011 6:21 PM
    I am totally shocked! A security alert for using IE!?!?!??! How could this be possible!?!?!?!!?
    /sarcasm
  • -2 Hide
    Netherscourge , March 14, 2011 6:34 PM
    Translation: Don't use IE9 when it comes out this week - use Google Chrome.

    AKA - A poorly veiled advertisement.

    I'm no IE fan, but Google seriously needs to relax and just worry about their own products.

  • 0 Hide
    Netherscourge , March 14, 2011 6:37 PM
    Also - why is Google afraid to say FACEBOOK?

    See, it's not that hard!

    FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK FACEBOOK


    Or more likely, Farmville? Everyone knows Farmville is compiling our Facebook status updates to brainwash our shopping tendencies.
  • -3 Hide
    Anomalyx , March 14, 2011 6:54 PM
    nebunit looks like google created the bug, lol

    Looks like you have no clue what you're talking about. Or didn't read the article at all. Or both.

    Clever advertising on Google's part, though. However, they failed to realize that people fall into one of 2 categories: 1) those who already don't use IE, and 2) those who don't care about security even if you were to hack their Facebook and send them a message from themselves. As long as they can water their crops, they don't care who has their passwords.
  • 0 Hide
    treefrog07 , March 14, 2011 7:51 PM
    IE is good for MS updates, but I like Firefox for normal web-surfing.
  • 1 Hide
    Anonymous , March 14, 2011 8:16 PM
    Using IE will make you scream "Ayeeeeeee" in pain.
  • 3 Hide
    someguynamedmatt , March 14, 2011 9:07 PM
    Ciuywho the hell uses IE ????

    Everyday users who aren't computer savvy. Which makes up basically most of the general population.
  • -1 Hide
    xerroz , March 14, 2011 9:44 PM
    Google are such weasels, what? they think I can see right through them? this is just publicity for their shitty google chrome browser and to shit on IE
  • -2 Hide
    mayne92 , March 14, 2011 10:03 PM
    otacon72Google should worry about their own garbage browser and less about MS. FF sucks too since he can't handle Flash.

    You post nothing but negative garbage on here and on ESPN. Just in case you didn't know that LOL
  • 0 Hide
    mayne92 , March 14, 2011 10:11 PM
    xerrozGoogle are such weasels, what? they think I can see right through them? this is just publicity for their shitty google chrome browser and to shit on IE

    So if a web developer told you that IE actually sucks in everything from experience...you would think I was out to get IE? lol
  • 1 Hide
    K2N hater , March 14, 2011 11:45 PM
    otacon72FF sucks too since he can't handle Flash.

    Firefox won't ship with closed-source plugins. You must install Flash on your own and at your risk.

    Tip: if IE is as vulnerable as Google claims then Flash alone is 5x as much as vulnerable.
  • -1 Hide
    JOSHSKORN , March 14, 2011 11:53 PM
    Or don't use IE. Download Firefox instead. It has a 64-bit browser, at least in BETA (called Minefield). Most computers that come out today run on a 64-bit OS. a 32-bit browser works, but it doesn't make use of your computer's full potential. Oh, and Adobe has a version of Flash for this as well. Do your research. Problem solved.
  • 1 Hide
    jimmysmitty , March 15, 2011 1:52 AM
    JOSHSKORNOr don't use IE. Download Firefox instead. It has a 64-bit browser, at least in BETA (called Minefield). Most computers that come out today run on a 64-bit OS. a 32-bit browser works, but it doesn't make use of your computer's full potential. Oh, and Adobe has a version of Flash for this as well. Do your research. Problem solved.


    Um IE has had a 64bit browser since IE8 if I remmeber correctly. And I have used it before.

    Still It doesn't say which version of IE is affected but I am going to go out on a limb and say IE8 and lower since IE9 is not technically official.

    So I laugh at Google and honestly, Chrome is meh. I have tried it. I am not a fan of it since Google likes to install other awesome stuff like Google Update that CONSTANTLY runs in the background. Talk about a security hole.

    Either way. I am fine with IE9 and FF 4.
  • -1 Hide
    ltbob , March 15, 2011 2:15 AM
    FF4 FTW

    meh I tried chrome its grate but I like the bulkyness of FF :) 
  • 0 Hide
    robd007 , March 15, 2011 5:12 AM
    there was an article explaining why the 64-bit version of IE wasnt not nearly as fast as the 32-bit version...not sure if that holds true for FF
  • 1 Hide
    iboomer , March 15, 2011 1:00 PM
    jimmysmittyUm IE has had a 64bit browser since IE8 if I remmeber correctly. And I have used it before.Still It doesn't say which version of IE is affected but I am going to go out on a limb and say IE8 and lower since IE9 is not technically official.So I laugh at Google and honestly, Chrome is meh. I have tried it. I am not a fan of it since Google likes to install other awesome stuff like Google Update that CONSTANTLY runs in the background. Talk about a security hole.Either way. I am fine with IE9 and FF 4.


    Yeah, well, IE 8 is the current version so that doesn't say much.

    Yeah, the MS alert says that it is across all windows platforms, which me all versions of IE.

    I love the fanboi's around here. FF sucks, Chrome sucks, IE sucks. Why don't you people get a life. I use IE, because everytime I install one of the others, it doesn't do what it was advertised to do (for me). If I have to do a bit of extra work to keep IE clean, so be it.
  • 1 Hide
    Zomby , March 15, 2011 2:53 PM
    Ciuywho the hell uses IE ????


    Most people do actually. Including tech savvy people, unlike what some people whant to think. Just because someone prefers a specific browser doesn't mean every other one sucks. I've been a web developper for years and I can tell you that every single browser suck at something.
  • 1 Hide
    eyemaster , March 15, 2011 4:46 PM
    Ciuywho the hell uses IE ????

    Oh, I don't know, maybe about 70% of the users of the internet?
Display more comments