Posts Tagged ‘MS08-078’

December 2008 IE Vulnerability

Wednesday, December 17th, 2008

by Dave Kennedy and Russ Cooper

I just checked, and so far not one member of the Verizon Business RISK Team has moved into their apocalyptic redoubts over the latest vulnerability in Internet Explorer (IE).  Our assessment is that this latest vulnerability isn’t very different than many of the IE vulnerabilities we’ve seen in the past.  IE has historically been a popular target for criminals, and we don’t doubt some are using/will use this latest vulnerability to take over users’ systems.  We assess the threat  volume as small, with locations isolated, and believe that several mitigations are available to reduce overall risk.

(more…)