Skip to main content

Microsoft Cites Lack Of Training For Missing Critical IE Bug

posted onDecember 23, 2008
by hitbsecnews

Microsoft researchers said that they overlooked a critical Internet Explorer bug because of inadequate processes and training that would have allowed them to detect the source of the error.

Microsoft released an emergency, out-of-band security patch last week repairing a critical error affecting the IE Web browser. The vulnerability stemmed from a fundamental flaw in the browser's data-binding function that ultimately left a gaping hole in the memory space that could be accessed and exploited by remote hackers.

In Microsoft's "Security Development Lifecycle" blog post, Michael Howard, the company's principal security program manager, said that researchers overlooked some critical factors that would have led to the bug's detection. The oversight was due, in part, to lack of training and an inadequate review process.

Source

Tags

Microsoft

You May Also Like

Recent News

Friday, November 29th

Tuesday, November 19th

Friday, November 8th

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Simplenews subscription

Stay informed - subscribe to our newsletter.
The subscriber's email address.
Keeping Knowledge Free for Over a Decade

Copyright © 2018 Hack In The Box. All rights reserved.

36th Floor, Menara Maxis, Kuala Lumpur City Centre 50088 Kuala Lumpur Malaysia
Tel: +603-2615-7299 Fax: +603-2615-0088