Microsoft Issues Out-of-Band Patch for Internet Explorer

The security update fixes a vulnerability that could allow an attacker to remotely execute code at the same privilege as the legitimate user.



Microsoft today released an off-cycle patch for a zero-day memory corruption vulnerability in Internet Explorer. 

CVE-2019-1367 is a flaw that can corrupt memory in such a way that an attacker could execute arbitrary code in Internet Explorer, and do so in the context (at the permission level) of the current user.

In the worst case, an attacker could install programs, view, change, and delete data, and create new user accounts with full user privileges, while the legitimate user is logged in as an admin.

According to Microsoft, the patch remediates the vulnerability by changing the way in which the scripting engine handles objects in memory.

For more, read here.

Check out The Edge, Dark Reading's new section for features, threat data, and in-depth perspectives. Today's top story: "The 20 Worst Metrics in Cybersecurity."

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Email This  | 
Print  | 
RSS
More Insights
Copyright © 2019 UBM Electronics, A UBM company, All rights reserved. Privacy Policy | Terms of Service