Earlier this week Microsoft announced yet another IE (Internet Explorer) bug. This one, Microsoft Security Advisory 977981, is one of the really bad ones that can allow attackers to take your Windows PC over. Yuck!
Microsoft is working on a fix, but there still isn’t one, and worse still, there are already several attacks out there that can exploit this IE security hole.
The new hole exploits how Internet Explorer uses certain CSS (Cascading Style Sheet) objects, which is commonly used to determine how a Web page is displayed. It’s put into play when you go to a page with contaminated JavaScript. Sound familiar? It probably does, deliberated corrupted JavaScript has been used to compromise browsers for over a decade, and it’s still doing it today.
This particular problem hits IE 6 and 7. If you have Internet Explorer 8, which is what comes on Windows 7, you’re safe from this one.