Fully patched Internet Explorer menaced by a whopping 4 code-execution bugs

Discussion in 'other security issues & news' started by Minimalist, Jul 23, 2015.

  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,069
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,038
    Location:
    The Netherlands
  3. Kobayashi maru

    Kobayashi maru Registered Member

    Joined:
    Nov 7, 2009
    Posts:
    124
    Location:
    Drivin' all night my hands wet on the wheel....
    Your only real defence is your wits. Hackers can't touch those.

    I wonder how the new slimmer 'IE' will do against this stuff? My gut feeling is that it's no contest.
     
  4. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
  5. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    IMO this is why patching everything is a good idea, but it shouldn't be your only defense.
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,038
    Location:
    The Netherlands
    Who said anything about third party sandboxes? I'm just saying, don't think you're safe, just because your browser is using a sandboxing mechanism like Chrome and IE.
     
    Last edited: Jul 28, 2015
  7. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Why the distinction on "never relying the browsers own sandbox" then?

    Safety is a relative term that depends on one's level of caution and profile. I would say the vast majority of users are safe, as long as they don't execute anything themselves and keep patching.

    As for Internet Explorer exploits, that isn't anything new. I'll be damned if it is autonomously ITW and up-to-date.
     
  8. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,038
    Location:
    The Netherlands
    I referred to the article about Chrome. But I didn't read this article correctly, it seems like these exploits couldn't break out of IE's sandbox. At least not without using another vulnerability in Windows itself.

    Yes correct, but then there's still the risk of zero days. That's why using anti-exe or anti-exploit makes sense.
     
Loading...