Critical update (Even for XP users!)

Out of band update for the VML exploit surprisingly includes XP

https://technet.microsoft.com/library/security/ms14-...

just updated...

Microsoft Security Bulletin Summary for May 1, 2014



Bulletin ID


Bulletin Title and Executive Summary


Maximum Severity Rating and Vulnerability Impact


Restart Requirement


Affected Software




MS14-021


Security Update for Internet Explorer (2965111)

This security update resolves a publicly disclosed vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using an affected version of Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

https://technet.microsoft.com/library/security/ms14-...

Saw this IE exploit on News last week affecting IE 11 all they way down to IE 6. Thought they would have to go all the way back to XP .

I can't help but think that people who go to dodgy sites with IE6 kind of deserve a little stress.

glad I am using EMET now.

alongside permanant DEP hack.

hack is here.

http://voidmain.realplain.com/

To summarise unless DEP is seto to always on, its easily exploitable, (opt in or opt out) this dll hardens it up.

Easiest thing to do is not use it. IE is a terrible browser