Microsoft includes XP users in Internet Explorer fix

[DaBees-Knees]

http://www.bbc.co.uk/news/technology-27249695

Microsoft has said users of its Windows XP operating system will also get the security update it has issued to fix a flaw in the Internet Explorer browser. The flaw is the first major bug to impact Windows XP after official support ended

It issued the update on Thursday to fix a bug that let hackers gain access and user rights to computers. Microsoft ended support for Windows XP earlier this month, ceasing to issue bug fixes or security updates for it. But the firm said it decided to make an exception as the flaw was discovered just days after the support ended.

"Even though Windows XP is no longer supported by Microsoft and is past the time we normally provide security updates, we've decided to provide an update for all versions of Windows XP," Adrienne Hall, general manager of Trustworthy Computing at Microsoft, said in a blog post.

"We made this exception based on the proximity to the end of support for Windows XP."

The flaw was reported earlier this week and there had been uncertainty over whether XP users would get the update when it was released. The flaw affected Internet Explorer (IE) versions 6 to 11 and Microsoft said it was aware of "limited, targeted attacks" to exploit it.

According to NetMarket Share, the IE versions account for more than 50% of the global web browser market.

Microsoft said that hackers could exploit the flaw by hosting a "specially crafted website" designed to exploit the vulnerability. If users visited the website, hackers could use it to gain access to their computer and get the same rights as the machine's user. However, hackers would have needed to convince users to view and interact with the website, and would have had "no way to force users" to view the content otherwise.

On Thursday, Microsoft said its security update fixed the flaw. "This update is fully tested and ready for release for all affected versions of the browser," the firm said. "  The majority of customers have automatic updates enabled and will not need to take any action because protections will be downloaded and installed automatically."

Having realised how many users, including corporate users, still use XP.  Microsoft seem to have had a realisation that a lot of people would have been very upset by this flaw being left unaltered.

[White Stripes]

this is... surprising actually.... microsoft are the type to just let the users sink or swim (windows once they get their money....

[silicon_toad2000]

i think corporate was the key word there

[White Stripes]

ermm... true... but it still doesnt explain the retraining needed for win8

[silicon_toad2000]

i think the marketing dept is in charge of win8 and the support dept was behind the xp patch. any org bigger that one person is schizophrenic

[White Stripes]

i get where you're coming from now

[GhostShip]

From the chatter around the web win8 has already been canned and we can look forward to win9, I hope this will be based on making it usable for XP enjoying users as the current new apple-copying model is just pathetic, folks might like apps on their ancillary devices and in reality most are junk level items but when it comes to corporate folks they need a proper business orientated usage model for spreadsheets and other industry focused activities, industry is not interested in apps and most users are not either, Microsoft should stick to what they have excelled at and forget about the drip-drip-pay leisure market, when they remember this they might find that their offerings take off a tad better.

[silicon_toad2000]

ha ha, i get it, excel