Microsoft finally fixes critical Internet Explorer vulnerability

The tech giant issues a permanent patch for a known exploit that was possibly used by cybercriminals and hackers over the last few months.

Microsoft's risk and impact graph showing an aggregate view of October's Severity and Exploitability Index. Microsoft

In its security update for this month, Microsoft has patched a critical Internet Explorer vulnerability that possibly exposed users to malware and hacks for the last three months.

The permanent patch is for an exploit known as CVE-2013-3893 , which had the capability to work its way into all supported versions of Internet Explorer. Microsoft announced the existence of the vulnerability in September and released a downloadable "Fix It" tool until the permanent patch was ready.

"The most severe vulnerabilities could allow remote code execution if a customer views a specially crafted webpage using Internet Explorer," Microsoft's Dustin Childs wrote in a blog post on Tuesday. "An attacker who successfully exploited these vulnerabilities could gain the same rights as the current user running Internet Explorer."

The new update with the permanent patch, dubbed MS13-080, fixes 10 issues within Internet Explorer.

In addition to patching the Internet Explorer vulnerability, Microsoft also issued three other critical bulletins and four important ones. All of the bulletins together target 26 different vulnerabilities in Windows, Internet Explorer, SharePoint, .NET Framework, Office, Silverlight, and more.

Featured Video
This content is rated TV-MA, and is for viewers 18 years or older. Are you of age?
Sorry, you are not old enough to view this content.

The problem with Amazon Dash buttons

Limits on choice mean new shopping gadget won't click for everyone. Bridget Carey explains how the buttons work, and the rule changes for sharing your Prime perks with others.

by Bridget Carey