• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

New Microsoft alert

I have a question about a report I just read on MSN about Microsoft telling it IE users to install something called the "Enhanced Mitigation Experience Toolkit". I guess there are security issues with IE. I looked at this EMET and appears to be quite technical for casual users. Do you have any idea what's going on and is it that critical for a home user.

Thanks

Replies

Kudos0

Re: New Microsoft alert

Hi skyslim,

Yes, there is a very real security issue with IE right now.  One option is to simply use another browser until IE is fixed.  Please see the following:

http://community.norton.com/t5/Tech-Outpost/New-IE-Zero-day-Vulnerability-Exploit/m-p/807244/highlight/true#M6020

Kudos0

Re: New Microsoft alert

So, since I never use IE I don't have to worry about installing this new software.

Asewlady

Kudos0

Re: New Microsoft alert

I'm just a fellow Norton user, not an expert.  But if someone does choose to install the temporary fix from Microsoft, it might be prudent to back up one's system first, at least with System Restore, and more optimally even a full backup as a disk image.  That way one's system can be restored if the fix itself affects any other applications, etc.

Kudos0

Re: New Microsoft alert

Is this alert for all versions of IE or just the newest IE9? 

Kudos0

Re: New Microsoft alert

IE 6,7,8,9 are affected

Kudos0

Re: New Microsoft alert

will the Norton add ons in IE protect us?
Kudos0

Re: New Microsoft alert


Calls wrote:
will the Norton add ons in IE protect us?

At some point an attack signature will be added to IPS (Vulnerability Protection) that should block the attack if it is encountered.  However, in the meantime (and preferably until IE is actually patched) the safest thing to do is to switch to something other than IE.  If you haven't tried other browsers, this would be a good opportunity to broaden your horizons.

Kudos1 Stats

Re: New Microsoft alert

For those wishing to know more about this, Microsoft has issued Security Advisory (2757760), Published: Monday, September 17, 2012.

Here is the link to the publication website:

http://technet.microsoft.com/en-us/security/advisory/2757760

Regards,

John

Kudos1 Stats

Re: New Microsoft alert

This is a kick.
How would the average user know about this?
I .ean a regular person who says hey My Norton is on, I have Microsoft updates up to date. I dont use java, and I have flash player and other programs up to date.
So if they are not tech oriented, how would they even know about this?
Kudos0

Re: New Microsoft alert

The average person doesn't really care, or bother to care, and that's a big reason why so many people are getting infected. Running security software with definitions years old, never updating Windows, using old browsers and unpatched programs. It very very common. But I agree, it's not that easy to get the information in the first place if you aren't interested.

Kudos0

Re: New Microsoft alert

IMHO, Microsoft's "recommendation" of using the EMET as a solution does come across a bit like a "grasping at straws" approach to the problem.  Throughout IE's history of existence there have been practically countless "vulnerability" issues and "corrective patches" for the web browser.  But this time, MS's decision to try trusting the average user to properly install and configure a tool like EMET to "encapsulate the defect", (and that's assuming the user manages to get everything configured correctly)... Well, it just kinda spanks of a MS "CYA" approach to "infilling" the time lag until the "official MS patches" are finally released.

 

My 2 cents...

 

Regards,

John

Kudos0

Re: New Microsoft alert

Or we can all upgrade to WIndow 8 and use IE 10 which MS say is not vulnerable .....

Actually that's what I'm in at the moment for other reasons so I can live dangerously ....

Hugh
Kudos0

Re: New Microsoft alert

And here I am, also on Win8 Pro, but using Chrome anyway (just in case)...  

Kudos4 Stats

Re: New Microsoft alert

Kudos0

Re: New Microsoft alert

I have not yet received this update
Kudos0

Re: New Microsoft alert

I thought it was supposed to arrive as update 20th hopefully today.

Windows 10 Pro, 64 bit.
Kudos0

Re: New Microsoft alert

The Microsoft pre announcement said 9/21 which is today but it has not come down yet -- I've an idea it comes around lunchtime East Coast time.

Hugh
Kudos1 Stats

Re: New Microsoft alert

It most likely will be released at 1:00PM EDT

Kudos1 Stats

Re: New Microsoft alert


ALF60 wrote:

It most likely will be released at 1:00PM EDT


Right you are! It's available to me now.

Windows 7 SP1 32bit - NSBU - 22.1.0.9
Kudos0

Re: New Microsoft alert

Hi killyourtv yes 26.9 mb in size on a windows7 64bit system restart required!!

Kudos1 Stats

Re: New Microsoft alert

Half that size on Win7 32 bit. Not that I ever use IE, but glad that's over. For now.

Windows 7 SP1 32bit - NSBU - 22.1.0.9
Kudos0

Re: New Microsoft alert

Not flagged on my WIN 7 32 bit HP yet ....

My Updates are set to notify, not download or install automatically.

Hugh
Kudos0

Re: New Microsoft alert

Hugh - FWIW - in a situation like this - where I know something is coming down, I'll open Windows Update and use the Check for Updates option - get the update, download and install it. 

I have my Windows Update set to download, notify and let me decide when to install.  In a case like this (where I am looking for it and want it as soon as available) I do it manually - as the other way never finds it until the day after they are released.

As an example, my Update Tuesday updatres never show up until Wed.

Kudos1 Stats

Re: New Microsoft alert

And for those using IE version 10 ...

http://technet.microsoft.com/en-us/security/advisory/2755801

Regards,

John

Kudos0

Re: New Microsoft alert

I do force a check after a while but I also like to see what the normal user is seeing <s>

Hugh
Kudos0

Re: New Microsoft alert

Hi there

I have my updates set to automatic.  I received the update this morning (on computer start up) as Cumulative Security Update for Internet Explorer 8 for Windows XP KB2744842.

Hope that helps.

Shep1

This thread is closed from further comment. Please visit the forum to start a new thread.