Urgent security update for Internet Explorer

Published: December 17, 2008

You might have heard in the news about a vulnerability in Internet Explorer versions 5, 6, and 7 that allows hackers to gain access to your computer and data if you go to certain websites. This problem, officially known as “Pointer Reference Memory Corruption Vulnerability,” is a way for hackers to craft webpages that enable them to run code or programs on your computer. This creates a risk to your privacy and the security of any information you have on your computer.

The good news is that there is a fix. The official name is the Microsoft Security Bulletin MS08-078, but here’s how to get the fix without wading through a sea of technical documentation.

Start here

The best way to get the fix is to use Windows Update or Microsoft Update, since you don’t have to know anything about your version of Windows or Internet Explorer to download and install the update. If you have automatic updates turned on, you should get the update the next time your computer checks for an update. By default, this is daily. For more information, see Get security updates for Windows.

However, you can check for updates right away if you prefer. To check manually, go to the Microsoft Update webpage. When the update program starts, just follow the instructions to check for and install updates.

If that doesn't work

If for some reason Microsoft Update doesn’t show that any updates are needed, you can download and run the specific update containing the fix by going to one of the links below. You need to know your version of Internet Explorer and Windows. Here’s how to check for the versions:

To see the version of Internet Explorer you are using, click the Help button in Internet Explorer, and then click About Internet Explorer. The version of Internet Explorer you are using appears in the About Internet Explorer dialog box.
To see the version of Windows you have, click the Start button, right click either Computer or My Computer (depending on the version of Windows you are using), and then click Properties. The version of Windows you are using appears toward the top of the window.

Downloading and installing the update

When you know which version of Internet Explorer and Windows you are using, click the appropriate link below. It will take you directly to the download page for the fix for your versions. Since you have to restart your computer once the update has been installed, you might want to save and close any programs you have open.

To download and install the update, click the version of Internet Explorer and Windows you are using:

If you don’t see your version of Internet Explorer and Windows listed above, you can go to the Microsoft Security Bulletin MS08-078 webpage to find other versions. Scroll through the page to find the versions of Internet Explorer and Windows that you are using.