Internet Explorer was vulnerable to threats 284 days in 2006

Brian Krebs at the Washington Post's Security Fix blog wanted to put together some statistics on how long it took major software providers to fix vulnerabilities last year. He started with Microsoft, and found that Internet Explorer was vulnerable to critical flaws for a total of 284 days. That's more than 9 months.

In fact, there were at least 98 days when Microsoft had not issued a fix even though criminals were actively exploiting some of those flaws to grab personal data from Internet Explorer users.

Krebs says he ran his data by Microsoft before posting it on the blog, and that aside from some minor issues, the company didn't bring up anything that would change the overall finding.

By comparison, Firefox was only vulnerable to a serious security threat for one 9 day period last year. Be sure to tune in tomorrow when Krebs plans to take a look at the number of security patches issued for Microsoft Office in 2006.

[via Slashdot]

Tags: internet explorer, InternetExplorer, security flaw, SecurityFlaw, vulnerability