No, the Internet Explorer Bug Isn't Fixed, Despite Reports

http://www.nbcnews.com/tech/security/no-internet-explorer-bug-isnt-fixed-despite-reports-n92426

By Julianne Pepitone
April 29, 2014

Incorrect reports are swirling that a major flaw in Internet Explorer has been fixed through a security update from Adobe on Monday.

But Adobe's update fixes a completely different issue -- which means Internet Explorer users are still at risk as they await a patch from Microsoft.

An Adobe spokesman confirmed to NBCNews: "The Microsoft advisory issued on April 26 is a separate issue from the Adobe bulletin issued April 28."

-----

In reality, Adobe's update fixes a serious but separate problem: a Flash bug that is actively being used to attack visitors of a Syrian government website. Security firm Kaspersky Labs posted about that issue on Monday, and Adobe credited Kaspersky in its security update for the alert.

That Flash bug is significant, and users should download Adobe's update. But it's entirely separate from the wider Internet Explorer problem.

-----

Meanwhile, Microsoft is working to fix that wider Internet Explorer bug. Until then users should exercise caution, and take steps like running alternative web browsers and downloading a Microsoft "toolkit" to help guard against attacks.