Microsoft patch fails to plug holes

NEWS Microsoft's latest patch for IE 6 has failed to plug at least one of the holes it was meant to fix, and leaves 12 reported bugs un-patched. The software giant's latest cumulative patch promises to eliminate "six newly discovered vulnerabilities", according to an advisory issued earlier this week, but fails to do so, according to a posting on security mailing list BugTraq. According to Danish security expert Thor Larholm, Microsoft is guilty of issuing "misinformation" and is "not actively keeping up with the security community and its publications". Larholm lists the 12 un-patched vulnerabilities here: http://jscript.dk/unpatched/ For more information, see http://online.securityfocus.com/archive/1/272695/2002-05-13/2002-05-19/0