Microsoft’s brain crop is diligently striving to ignite those dormant sparks and get away with the bugs which have been troubling the company’s Internet explorer’s clientele from the past few days. The patches for the vulnerabilities will be made available by the firm in its next security update due on 11 April. More than 200 Web sites have been hacked and seeded with nasty code taking advantage of unpatched security hole in Microsoft's Internet Explorer Web browser.
The software pioneer has already advised its users to be chary confirming three newly discovered bugs targeted by malicious hackers keen to catch out unsuspecting users. The vulnerability lets hackers exploit active scripting - a Microsoft technology allowing different software components to interact over the Internet in IE to install keystroke loggers and other malicious software on its prey’ terminal. As said by Stephen Toulouse, head of Microsoft's Security Response Center on Saturday "We're working day and night on development of a cumulative security update for Internet Explorer that addresses the vulnerability," The authorities however asserted that the attacks are limited in scope for now.
The software giant has also established a public database accessible from the Microsoft Connect site to allow Internet Explorer users to report bugs in the Web browser. The bug database accessible Microsoft Passport account holders will be accepting bug posts for Internet Explorer 7 and future versions only. The initiative aims at getting timely user feedback for offering the customized state of art technology work in future. Microsoft has posted a best practices guide for posting bugs and allows users to restrict access to bug posts by marking them as private.
Observing two weeks as too long to leave customers without any protection the Microsoft authorities have taken due care to release the necessary guidelines for users worldwide. As advised by firm authorities users should take care not to visit unfamiliar Web sites that could potentially host the malicious code and to use IE should by either disabling "active scripting" or downloading the IE7 beta2 preview which is secure to use. Microsoft also recommends that users who believe their machines may have been infected should visit the company's Windows Live Safety Center to have their machines scanned and the malware removed.
