Microsoft Issues Internet Explorer Security Update
414948
A critical flaw in Microsoft Corp.&#39;s (MSFT.O: Quote, Profile, Research) Internet Explorer Web browser could allow a hacker to take control of a computer, the world&#39;s largest software maker said on Wednesday.
659695
Microsoft has acknowledged that a bug fix for its Internet Explorer browser last week did, indeed, cripple the browser for some users. Rather than re-release the patch, it's telling users how to modify Windows' registry to get IE back up and running.
475359
InfoWorld - Microsoft has quietly released a patch aimed at improving the performance of Internet Explorer 7&#39;s phishing filter ahead of the company&#39;s regular patching schedule, which occurs on the second Tuesday of every month.
739239
(InfoWorld) - Microsoft Corp. has rolled out its monthly security updates for December, patching critical flaws in Internet Explorer, Windows Media Format, and the Visual Studio 2005 development software. The seven security patches address 11 bugs, including two in the Windows Media Player software. However, no fixes were provided for two Microsoft Word flaws that have been used in a small number of attacks during the past week. Microsoft had said it would release only six patches on Tuesday, but the company added the Windows Media Format update at the last minute, after reports of attacks based on this vulnerability began surfacing. The Windows Media Format is used by Microsoft's Windows Media Player software. In late November, security vendors warned that a buffer overflow error could occur when the Windows Media Player processed ".asx" (Advanced Stream Redirector) media files, meaning that users would first need to be tricked into opening a malicious media file for the attack to work. In its update Tuesday, Microsoft also patched a similar bug in the way the media player processes ".asf" (Advanced Systems Format) files. The Internet Explorer patch fixes four bugs. It is also rated critical, and is noteworthy because some of these bugs will probably begin to be exploited by hackers by week's end, said Gunter Ollmann, director of IBM Corp.'s Internet Security System's X-Force threat analysis service. Enterprise administrators should also pay close attention to an SNMP (Simple Network Monitoring Protocol) patch issued Tuesday, Ollmann said. Microsoft has rated this patch as "important," rather than critical because SNMP is normally blocked at the firewall and turned off by default on Windows systems. However, it is widely deployed as part of the network monitoring infrastructure in the enterprise, and is often used on critical servers, Ollmann said. Ollmann believes this SNMP patch is the "most important" update for enterprise customers. "Since the service is widely deployed in the enterprise and since it's commonly deployed on servers, we think this would be an important attack vector for enterprises," he said. The remaining updates include a "critical" fix for Visual Studio 2005, and "important" updates for Windows and Outlook Express, Microsoft said. Microsoft defines "critical" flaws as bugs that could allow the propagation of an Internet worm without any action on the part of the victim. The company's next set of security updates are due Jan. 9.
417928
(InfoWorld) - Microsoft has released a patch for Internet Explorer 7 (IE7) that will boost the brand-new browser's performance on some Web sites. Some users had reported that the new phishing filter had been slowing down the PC's performance as IE evaluated the security of Web pages that contained a lot of frames. "When you use Windows Internet Explorer 7 to visit a Web page, the computer may respond very slowly as the phishing filter evaluates Web page contents," Microsoft said in a note published Tuesday. MicrosoftÂ introduced the filterÂ in IE7,Â released in mid-October, as a way of warning Web surfers when they might be visiting untrustworthy Web sites. The new patches are for Windows XP and Windows Server 2003 versions of IE7, but not for users running the browser on Windows Vista.
299
Updated: A &quot;cumulative security update&quot; plugs eight holes in the Internet Explorer browser, while other patches address &quot;critical&quot; vulnerabilities in the Windows shell, in SMTP and elsewhere.
476991
Microsoft Corp.  released on Tuesday a patch for its latest "critical" rated security flaw affecting its Windows, Office and developer tools software programs.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.
209227
Security researchers are warning of another pair of vulnerabilities in Microsoft Corp.&#39;s Internet Explorer browser affecting users on fully patched Windows XP Service Pack 2 systems.
513312
Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.The updates were pre-announced Thursday morning on Microsoft&#39;s Web site in order to give IT staffers a sense of how busy they will be next week installing the patches.One of the updates is considered critical for Windows Vista and XP users because the flaw it fixes could be used by attackers to install unauthorized software on a victim&#39;s computer. This update is rated important for Windows Server 2003 users and considered moderate for Windows 2000 users.The second update, rated important for all Windows users, could allow an attacker to run software with a higher level of privilege on a system than would normally be allowed.Microsoft did not provide any technical details on the updates.With just two updates scheduled, January will be a light month by Microsoft&#39;s standards. In 2007 the company shipped 69 software updates, an average of just under six per month.
67079
Microsoft Corp has released a patch for its latest âcriticalâ rated security flaw affecting its Windows, Office and developer tools software programmes.
309807
Microsoft updates IE 7 due to performance issues with its phishing filter.
83266
(InfoWorld) - A new update for the Firefox browser fixes an unusual vulnerability that could cause malicious code to run if the browser is launched by Microsoft's Internet Explorer. The critical vulnerability involves Internet Explorer's ability to launch other applications such as Excel or Firefox after a user clicks on a specially written link in a Web page. Explorer does not properly check the syntax of the link, which could allow a malicious link to attack Firefox if launched, according to Mozilla, the open source project that develops Firefox. Microsoft said itÂ didn't feel it was an issue for Explorer. Either way, Firefox's 2.0.0.5 release fixes the problem by now validating incoming data. The update will automatically be pushed out to Firefox 2.0 users via the built-in update system, Mozilla said in an advisory. The update also fixes seven other vulnerabilities, two of which are considered "critical" by Mozilla. One problem, labelled 2007-18, is a memory corruption problem that could cause arbitrary code to run on a machine. The other, 2007-21, could also allow arbitrary code to run.
532361
InfoWorld - Microsoft has offered a technical workaround for Internet Explorer users who have found their browsers crashing after installing a recent set of security patches.
7141
(Article Central) Microsoft released its October batch of security advisories this week, with a number of &quot;critical&quot; patches, including a significant fix for the Internet Explorer browser.
506946
Microsoft posted a patch on Tuesday afternoon for Internet Security &amp; Acceleration Server 2000 and Proxy Server 2.0. The patch fixed a spoofing vulnerability that Microsoft rated an &quot;important&quot; problem.