Microsoft Issues IE Patch
7141
(Article Central) Microsoft released its October batch of security advisories this week, with a number of &quot;critical&quot; patches, including a significant fix for the Internet Explorer browser.
257602
In the latest incident of a now-chronic problem that has been bugging Microsoft all year, a recent security patch now causes IE6 to crash in Windows XP...again.
387199
Microsoft has issued a patch for a compatibility problem between the recent Windows XP Service Pack 2 and an advertising application run on many users&#39; machines.
83412
Third party, fire and theft Security researchers have released a patch designed to protect users against an outstanding Internet Explorer vulnerability in the absence of available security updates from Microsoft.â¦
309807
Microsoft updates IE 7 due to performance issues with its phishing filter.
506946
Microsoft posted a patch on Tuesday afternoon for Internet Security &amp; Acceleration Server 2000 and Proxy Server 2.0. The patch fixed a spoofing vulnerability that Microsoft rated an &quot;important&quot; problem.
216439
Acknowledging that its patching process has "not been an example of our best work," Microsoft this week issued a second update to security bulletin MS06-042, which was released in August. The original patch included a security vulnerability - and it turns out the fix introduced even more.
648687
Microsoft rushed out a patch to fix a hole in its IE browser software that was being widely exploited.
121334
Microsoft issued a patch for what it says is a &quot;critical&quot; security flaw in the way Windows programs handle JPEG images. According to a security bulletin accompanying the patch, the flaw
260192
Mozilla will patch a security bug in Firefox that could be attacked in Internet Explorer.
530645
The absence of an official patch from Microsoft for a known and widely exploited Internet Explorer flaw has spawned a cottage industry for homegrown fixes.
659695
Microsoft has acknowledged that a bug fix for its Internet Explorer browser last week did, indeed, cripple the browser for some users. Rather than re-release the patch, it's telling users how to modify Windows' registry to get IE back up and running.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
2243
(InfoWorld) - With attackers finding new ways to exploit aÂ critical flaw in Internet Explorer, Microsoft Corp. has released a patch for the problem, ahead of its next scheduled round of security updates. The patch fixes a critical vulnerability in the way Internet Explorer renders VML (Vector Markup Language) graphics. Hackers had been exploiting the flaw, which also affectsÂ some versions of Outlook, for more than a week, and in recent days malicious activity had been on the upswing. More information on the update, which was released Tuesday, can be foundÂ here. The out-of-cycle release is unusual, but not unprecedented. Microsoft generally releases its security updates on the second Tuesday of every month, giving system administrators a predictable way to set aside time to test the new software. Occasionally, the company will release patches ahead of time if a flaw is being widely exploited by attackers. In January itÂ patched a critical flaw in the Microsoft Windows Metafile (WMF) image-rendering engine after it became a widespread problem. With attack code that works on the latest version of Windows XP now publicly available, the VML bug is shaping up as a very serious concern for administrators, said Ken Dunham, the director of Verisign Inc.'s iDefense Rapid Response Team. VML attacks have now "dwarfed the WMF activity in the same period of time compared to last year," he said. By Tuesday, more than 3,000 Web sites were already infecting users with malware that exploited the VML bug, according to Dunham. One week into the WMF outbreak last January, iDefense saw about 600 sites exploiting the problem. Security experts also warn that there are many variants of the VML malware, some of which may be missed by security software. Researchers at iDefense are now looking at a dozen possible variations of the VML exploit code and have confirmed the existence of seven variants, Dunham said. "With WMF there wasn't nearly as much modification. We see a lot of different permutations and obfuscation techniques being utilize with VML attacks." AÂ group of security researchers released a patch for the VML flaw late last week, independent of Microsoft, but criminals have even found a way to exploit the fix. In the past few days they have been circulating phoney e-mails, claiming to be a patch for the VML problem. If downloaded, this fake patch actually installs malicious software on the victim's system, Dunham said. Microsoft's next regularly scheduled security updates will be released Oct. 10. Â ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
543022
Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net.
17746
SEATTLE -- Microsoft released a patch for its latest &quot;critical&quot; rated security flaw affecting its Windows, Office and developer tools software programs, the company said Tuesday.
535582
More than two months after HD Moore's "Month of Browser Bugs," Microsoft is still scrambling to patch most of the 22 IE vulnerabilities revealed in July -- not to mention the 70 others Moore found in August.