Serious bug in fully patched Internet Explorer puts user credentials at risk

[Chiefcrowe]

http://arstechnica.com/security/201...ternet-explorer-puts-user-credentials-at-risk

 

[TheRyuu]

AFAIK there is no workaround or mitigation for this issue (short of disabling javascript I guess). Even with EPM, EMET, 64-bit, etc the PoC still worked.

The only upside is that it appears to slightly complicated to carry out successfully and needs user interaction.