IE Mobile: Microsoft Fails To Fix A 6 Month Old Vulnerability

Details are now published online.

Now here is something that does not exactly help the “buggy and old” IE public perception. Back in November and earlier this year in January, Microsoft was notified about the 4 security vulnerabilities that affect both Internet Explorer for desktop as well as smartphones and never bothered to fix them.

In fact, the software giant has now stated that they failed to do so because “there were no attacks reported”, hence they did not bother to do so, not to mention that Internet Explorer will also be replaced with Microsoft Edge later this year.

As explained by TippingPoint researchers, “The vulnerability relates to how Internet Explorer processes arrays representing cells in HTML tables. By manipulating a document’s elements an attacker can force a Internet Explorer to use memory past the end of an array of HTML cells. An attacker can leverage this vulnerability to execute code under the context of the current process.”

Well, good luck to anyone that is still on a fully patched IE.

[Via: ArsTechnica]