Internet Explorer Zero Day Exploit and Windows XP
Microsoft has reported an Internet Explorer Remote Code Execution Vulnerability (CVE-2014-1776), that affects all versions of Internet Explorer.
Microsoft released a security advisory on a vulnerability in Internet Explorer that is being leveraged in limited targeted attacks. There is currently no patch available for this vulnerability and Microsoft has not provided a release date for one.
Various anti-virus companies have confirmed that the vulnerability crashes Internet Explorer on Windows XP. Because of Microsoft’s recent end of support for Windows XP on 04/08/2014, this will be the first zero-day vulnerability that will not be patched for Windows XP users.
The NSA has recommended that all Windows XP users stop using internet explorer, and use another browser, at least until they are able to upgrade to a newer operating system.
Microsoft stated that its EMET (Enhanced Mitigation Experience Toolkit) version 4.1 and above can mitigate this Internet Explorer vulnerability and is supported by Windows XP. Besides using EMET, many anti-virus companies and industry experts are encouraging Windows XP users to temporarily switch to a different Web browser until a patch is made available by Microsoft.
If you need assistance with protecting your systems, or upgrading your Windows XP machines, please contact the CCS Retail Systems Support Department.