Nevertheless, the vulnerability was serious enough for Germany's Federal Office for Information Security to issue an alert Monday, warning people against using IE until Microsoft releases a fix. Sophos was also recommending that people use another browser.
Microsoft was given high marks for the speed of its response to the vulnerability. "Generally, they are moving really quick, and they are communicating with the public," Storms said.
Because consumers are usually slow to install manual fixes, a much larger number of Windows users will be protected once the automatic update is released. "They need to prioritize an official patch that is deployed using Windows Update to truly provide protection to most IE users," Wisniewski said.
Sign up for Computerworld eNewsletters.