A new Internet Explorer bug can invade your entire PC, so stop using it



[ad_1]

If you have not gone beyond Internet Explorer, here is another reason to do it: Google and Microsoft have discovered a new vulnerability of IE that can take control of your entire PC.

Microsoft on Monday released CVE-2019-1367, a script engine memory corruption vulnerability that exists in virtually all versions of Internet Explorer for Windows 7, Windows 8.1, and Windows 10. (The bug discovery was attributed to Clement Lecigne from Google's threat analysis.) Group, and previously reported by the registry.) Vulnerability "corrupted[s] memory so that an attacker can execute arbitrary code in the context of the current user, "Microsoft said.

The continuous alert explains what this means for users. "An attacker who successfully exploited this vulnerability could obtain the same rights as the current user," Microsoft says. "If the current user is logged on with administrator rights, an attacker who successfully exploited this vulnerability could take control of the affected system." An attacker could then install programs. View, edit, or delete data or create new accounts with full user rights. "

In other words, if an attacker is able to convince you to click on an affected web page, this attacker can do what he wants on your PC and your stored data.

There are mitigations. If you are running Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016 R2, Windows Server 2016, and Windows Server 2019, Internet Explorer operates in a restricted mode that may reduce the chance that a user will download software malicious. The Microsoft CVE Web page also includes commands that users can enter into 32-bit or 64-bit systems to protect them by restricting access to JavaScript. However, Microsoft warns that these workarounds may affect the functionality of an attenuated system.

The safest solution? Do not use Internet Explorer. Microsoft implemented Microsoft Edge in 2016 as a safer and more functional alternative for Internet Explorer, and then said that IE could be run as an Edge tab. then said that it would replace Edge with a chrome-based Edge version – without really specifying what it meant for Internet Explorer.

In case of confusion, the easiest way is to download Chrome, Firefox, Opera or the modern browser of your choice. Virtually everyone can import your previous bookmarks in the blink of an eye and get you into a safer browser in seconds. The IE time is over and this is further proof.

Note: When you buy something after clicking on links in our articles, we can earn a small commission. Read our affiliate link policy for more details.

[ad_2]

Source link