Microsoft has released a security advisory for certain versions of Internet Explorer . Vulnerable versions are susceptible to remote code execution. There is no update for this vulnerability at this time; however, an update will be released on Tuesday, May 14th, 2013. The IT Security office recommends one of the following to mitigate the vulnerability (in order of viability):
Internet Explorer 8
Internet Explorer 6, 7, 9 and 10
Microsoft Security Advisory (2847140)
Vulnerability in Internet Explorer Could Allow Remote Code Execution
Released: May 3, 2013
OIT has defined the following categories to describe the severity of security risks:
URGENT severity represents a broad threat to the entire campus community.
SEVERE severity included remote exploits and worms.
IMPORTANT severity includes virus and local exploits for commonly used services.