Internet Explorer
Exploit code for the IE flaw is already on the internet

France joins Germany in call to dump IE

Microsoft under heavy pressure to fix zero-day flaw used in hacking attack on Google

Phil Muncaster

The pressure on Microsoft to release an out-of-cycle patch for an IE flaw which allowed Chinese hackers to attack Google's systems continues to grow, after authorities in France joined the German government in urging citizens to use an alternative browser.

Microsoft admitted late last week that the hack of Google's systems revealed on Tuesday was caused by a vulnerability in version 6 of its popular browser.

"The vulnerability exists as an invalid pointer reference within Internet Explorer," read a Microsoft security advisory.

"It is possible under certain conditions for the invalid pointer to be accessed after an object is deleted. In a specially crafted attack, in attempting to access a freed object, Internet Explorer can be caused to allow remote code execution."

It later emerged that the exploit code for the flaw had made its way onto the internet, increasing the likelihood of copycat attacks.

The French and German authorities are now urging their citizens to use an alternative browser until the flaw is fixed, and the pressure on Microsoft to release an out-of-cycle patch is growing.

However, Microsoft is continuing to advise users to upgrade to the latest version of the browser, which appears to be unaffected by the vulnerability.

Graham Cluley, senior technology consultant at security vendor Sophos, warned that switching browsers may cause more problems than it solves in many cases.

"If your IT department doesn't already formally support an alternative brow ser, and if your users aren't already familiar with the other browser, you may be causing more problems than it's worth by summarily switching browsers," he wrote in a blog posting today.

"You may also have web-based applications that don't work well, or even at all, unless they are accessed with Internet Explorer. That's not going to be good for productivity. And finally, what if your replacement browser itself turns out to contain a vulnerability? Are you going to switch again?"

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Hillary Clinton

US government to complain to China over Google hack

State department spokesman reveals diplomatic tension between two superpowers

Yahoo

Yahoo under fire from Chinese partner over Google hack

Alibaba Group, which owns Yahoo China, describes Yahoo's comments as 'reckless'

McAfee CTO: Google hack was 'watershed' moment

'Targeted and co-ordinated nature of the attack' marks it out, says George Kurtz

Microsoft admits IE flaw to blame for Google hack

McAfee notifies Redmond of vulnerability

Related white papers

Related jobs

Most read stories

Most watched

Analysis and Reports

Storage-as-a-Service: Best efforts or best practice?
IDG research: IT professionals understand the fundamentals of managing and protecting data, but do not apply best practices

The seven security myths of Microsoft Windows 7
It is essential to separate myth from reality about the built-in security of Microsoft’s latest offering

Poll

VMworld 2010 poll

VMworld 2010 poll

How advanced is your firm's cloud computing strategy?

View poll results

White paper library

Attachmate

Smartstream

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you thousands of white papers, case studies and analyst reports.

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

mark hurd

Mark Hurd appointed Oracle president

Charles Phillips out as former HP chief gets job with...

Cloud computing

CIMTrek offers path to the cloud for Lotus users

Tools help migrate Notes/Domino workflows to cloud-based alternatives

ViewSonic ViewPad 7

ViewSonic ViewPad 7 video

Hands on with 7in tablet that features phone capability and...

TalkTalk

ICO warns TalkTalk over URL tracking service

Watchdog criticises ISP for failing to inform customers of trial

Primary Navigation