Sales
0161 215 3700
0800 458 4545
Support
0800 230 0032
0161 215 3711

Microsoft tells how it missed critical IE bug

Microsoft tells how it missed critical IE bug

Microsoft Corp. developers overlooked a critical bug in the Internet Explorer browser because of a lack of adequate testing tools and training, a company official acknowledged last month.

The flaw, which Microsoft patched last week with an emergency update, had gone undetected for at least nine years.

Michael Howard, a principal security program manager who has been a proponent of the company's secure code-development process, said that Microsoft programmers had not been taught to look for the type of vulnerability that hit the data-binding function of IE.

Even Microsoft's automated "fuzzer" testing tools, which are dropped into applications to find failures, missed the bug, Howard said in a post on the company's Security Development Lifecycle blog.


print this article

Return to internet news headlines
View Internet News Archive

Share with: