MS to finally fix zero-day exploit in I.E.8

After a seven month lapse, Microsoft has announced it will provide a fix for the zero day Internet Explorer 8 vulnerability.

The flaw allowed attackers to execute arbitrary code on computers running the older Internet Explorer version 8 through drive-by and phishing attacks.

A spokesperson said in a statement: "Public disclosure was limited and does not currently represent risk to Internet Explorer users." We are not aware of any exploits resulting from a privately disclosed issue involving Internet Explorer 8 and have not identified any impact to our customers."

The disclosure read: "This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file."