Details from Kaspersky on the IE 0day

Topic

New Reply

Boris Larin at Kaspersky has published details on one of the two “OMG! It’s a ZERO-DAY!” security holes plugged yesterday, CVE-2020-1380 – “Scripting
[See the full post at: Details from Kaspersky on the IE 0day]

2 users thanked author for this post.

CAS, Elly

Reply | Quote

Replies

Woody, candidly I lack the technical knowledge to understand the Kaspersky article.  I don’t know if I have a problem or not. I’m hoping that you might be able to give me some guidance.

I am forced to use IE 11, indirectly, because I am a long time user of Quicken. When Quicken downloads my transactions it does so using IE to connect to my financial institutions. I never use IE as a browser. My default browser is Firefox ESR but Quicken will not work with Firefox. As an aside, Quicken has issues with Edge, too.

I do not have a MS account, and connect to the internet using a local account. My patching is current through July 2020. My version of Win 10 is 1909 OS build 18363.959.

CAS

Reply | Quote

To exploit the vulnerability you need to visit a malicious web site with IE11.
If your only use of IE11 is for Quicken to connect to your financial institution, there is very little chance that you will visit a malicious site.

If you are really concerned you could do several things.

1. Don’t download transactions in Quicken until Windows is patched.
2. Backup before using Quicken and AV scan after use.
3. Backup your machine and install the patch manually.

cheers, Paul

1 user thanked author for this post.

CAS

Reply | Quote

Thank you for your reply, Paul. I’m going to backup my computer and then install the two IE patches, manually. (Better safe than sorry.) I’ll cross my fingers and hope the patches don’t cause chaos with my computer.

Stay safe.

CAS

 

Reply | Quote

After giving your options another look I decided to do nothing, Paul. Given my circumstances, this is a perfect case for the application of Occam’s Razor.

 

CAS

1 user thanked author for this post.

Paul T

Reply | Quote