Internet Explorer victim of a new vulnerability that can put the security of our computers at risk
Table of contents:
We don't know if at this point, Internet Explorer may still have too many users. Edge came to replace the mythical browser but its work was left halfway and at Microsoft they had no choice but to launch a replacement in the form of Chromium-based Edge, which It must be said, it is leaving very good impressions.
But we return to IE (Internet Explorer) and despite the fact that it is already quite cornered, it continues to count for many users, organizations and companies, who have it as their main browser.A decision that is increasingly difficult to defend if we take into account news like this that concerns us and that speaks of a new and serious vulnerability discovered
MHT Files
It has been done by a researcher, John Page, who has published a new vulnerability that is also difficult to correct. A security flaw due to the MHT file system used by this browser With the file name MHT or MHTML we are faced with a type of file in which all the web page is archived in a single pack that can include HTML code, images, audio files, flash animations…
The problem with this new threat is that an attacker running malicious code, can access any content stored in one of these data packets , Internet Explorer being the default Windows application for saving this type of file when storing web pages.A format that is becoming increasingly obsolete, as most browsers use the standard HTML file format.
Microsoft has already been notified
Page discovered this security breach, which affects versions of Windows such as Windows 10, Windows 7 or Windows Server 2012 R2 Once discovered, he informed Microsoft, a company that, as usually happens in these cases, has a period of three months before the existence of said threat can come to light. And since it came to light, Microsoft has not corrected it by releasing any patch.
Now that the vulnerability has been exposed and all the data related to it can be accessed. And as long as Microsoft still doesn't release a fix, all users who want to access an MHT (MHTML) document will have their computers at risk.
Source | ZDNet More information | Hyp3rlinx