• Most Popular
  • Most Shared

NYSE and AMEX quotes delayed by at least 20 minutes. NASDAQ delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.

Microsoft issues emergency "Google attack" patch

Related Topics

SEATTLE | Thu Jan 21, 2010 6:11pm EST

SEATTLE (Reuters) - Microsoft Corp on Thursday released a patch to protect users of its Internet Explorer browser from attacks similar to those directed at Google Inc's operations in China last week.

The world's largest software company, which said hackers targeting Google and at least 20 other companies in China exploited a weakness in its browser, said its new patch was "critical" and people should apply it as soon as possible.

Other hackers have begun to exploit the flaw, according to researchers with Symantec Corp, the world's biggest security software maker.

Symantec has found viruses that take advantage of the weakness in Microsoft's browser on some 100 websites, security researcher John Harrison said on Thursday.

They are dangerous because they can infect the PC of any user who visits those sites. Unlike less powerful viruses, it is not necessary for people to download software for their machines to become infected, Harrison said.

PCs are safe if they apply the patch, which resolves eight vulnerabilities in Internet Explorer, Microsoft said. The most serious could allow hackers to gain control of a computer remotely via Web sites people visit while using the browser.

"We're always working, we have fewer vulnerabilities

than our competitors," said Microsoft Chief Executive Steve Ballmer at an energy conference in Houston, addressing cyber-security concerns.

He gave no indication that Microsoft would change its business in China after Google threatened to quit the country last week. "We respect the laws of China, it's the only appropriate thing for us to do," he said.

The viruses Symantec has found only successfully attack Internet Explorer 6, though hackers could figure out how to break through the defenses of Internet Explorer 7 and 8, the most recent version of the software, Symantec's Harrison said.

Most Internet Explorer customers, who have automatic updating enabled on their systems, will not need to take any action on the security patch, Microsoft said. For manual updating, it directed users to its website (here).

(Reporting by Bill Rigby, Jim Finkle and Anna Driver; Editing by Richard Chang and Robert MacMillan)

Comments

Jan 21, 2010 7:03pm EST

Why would Google not be using chrome?

JockMcTavish Report As Abusive
 
 
Jan 21, 2010 7:31pm EST

Ah good, a patch to my favorite browser, IE6

SteveRQA Report As Abusive
 
 
Jan 21, 2010 8:10pm EST

Because Google probably has more than a 15k desktop machines (for their 20k employees, out of which let’s 6k are unix systems developers and run linux, and they would use chrome or ff) and IE is coupled with Windows, so while Chrome could be deployed to Google Desktops, that doesn’t necessarily mean employees wish to use it. Most big firms (and I work for one of the worlds largest financials), give users options between IE, Firefox, at minimum and now probably chrome via QA.

straticus1 Report As Abusive
 
 
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.

 

 
*We welcome comments that advance the story directly or with relevant tangential information. We try to block comments that use offensive language or appear to be spam and review comments frequently to ensure they meet our standards. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters.