Microsoft Issues Stopgap Fix for IE 0-Day Flaw

Summary: Microsoft released a one-click 'fix it' tool to blunt attacks exploiting a critical Internet Explorer flaw affecting IE 7, 8 and 9, ahead of an official patch (MS12-063) scheduled for Friday, Sept. 21, 2012. Microsoft's Yunsun Wee said the tool should not affect browsing, requires no reboot, and need not be uninstalled before the full patch; the fix applies only to 32-bit versions of Internet Explorer.
Bottom line: A reliable exploit for this vulnerability had already been rolled into free, easy-to-use attack tools, while Microsoft characterized attacks as 'an extremely limited number' - so the gap between the stopgap and the Sept. 21 patch was the window attackers could work in.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026