This “zero day” vulnerability affects Internet Explorer (IE), users whose computers run the Windows XP or Windows Server 2003 operating software and affects a part of IE used to play video. See the Zero Day Initiative Disclosure policy here. This vulnerability was discovered by Peter Vreugdenhil who informed Microsoft on January 26, 2009 and prompted Microsoft’s public announcement (Microsoft Security Bulletin MS09-019 – Critical), first on June 9, 2009.
Is this excessive lag time between when a security flaw is first discovered (usually by 3rd party sources like Zero Day Initiative), and the paying consumers becoming informed of the problem by large multi-national companies like Microsoft… much less the problem getting a legtimate fix – an issue of off-shore out-sourcing to places like India that does $84 Billion of IT outsourcing annually.
Some speculate that this equates to over $220 Billion in transferred U.S. dollars off-shore “annually” in the IT business sector alone…
.gif)
Thousands of random web sites have been hacked over the past week in which this malicious software that exploits the un-patched IE vulnerability has been setup by various hackers. Innocent people are then lured to these infected sites after clicking on a link in spam e-mail. Currently Mozilla’s popular Internet browser – Firefox is NOT affected.