Ie 9

waddler_8

J_B wrote: »

Why can IE9 (not being used) 'make your computer more secure' ?

m5rcc wrote: »

IE is full of security holes

Slightly misleading without giving the full facts.

Whilst it's true there are unpatched vulnerabilities in IE, there's currently only 1 unpatched vulnerability in IE9 - rated Not Critical (citing Secunia).
http://secunia.com/advisories/product/34591/?task=advisories
http://secunia.com/community/advisories/terminology/

Not Critical (1 of 5)
Typically used for very limited privilege escalation vulnerabilities and locally exploitable Denial of Service vulnerabilities.
This rating is also used for non-sensitive system information disclosure vulnerabilities (e.g. remote disclosure of installation path of applications).

A workaround that mitigates any threat is advised.

http://secunia.com/advisories/47129/

1) An error when handling cache objects can be exploited to enumerate visited sites.

2) The application does not properly handle objects returned by the "getComputedStyle()" function, which can be exploited to enumerate visited sites.

Solution
Enable "InPrivate Browsing" when browsing untrusted websites or do not browse untrusted websites.

It's important to realise the extent of any security threat from a vulnerability (Criticality), based on the consequence of exploiting it (Impact) and whether the vulnerability is POC (Proof of concept), or actively being exploited "in the wild".

An unpatched vulnerability can have it's Criticality status upgraded at any time, should it become a greater threat to security & if there are reports of it being actively exploited for malicious reasons. MS would usually take steps for it to be patched in that scenario.

patman99

You could always install 'Chrome' or 'FireFox'. Problem solved. Simples.