Microsoft to patch critical IE hole

Out of cycle

Post a comment
Print

By Elinor Mills, 27 July 2009 09:05

NEWS

In a rare move, Microsoft on Friday said it would be releasing security updates on Tuesday - outside its monthly patch cycle - for a critical vulnerability in Internet Explorer and a moderate vulnerability in Visual Studio.

The two security bulletins will address one overall issue and are being released separately "to provide the broadest protections possible to customers", Microsoft said in a statement.

The vulnerabilities affect Windows 2000, Windows XP, Vista, Windows Server 2003 and 2008, Internet Explorer 6, 7 and 8, Microsoft Visual Studio .NET 2003, Visual Studio 2005 and 2008 and Visual C++ 2005 and 2008, according to the security bulletin advance notification.

The statement said: "While we can't go into specifics about the issue prior to release, we can say that the Visual Studio bulletin will address an issue that can affect certain types of applications.

"The Internet Explorer bulletin will provide defence-in-depth changes to Internet Explorer to help provide additional protections for the issues addressed by the Visual Studio bulletin."

"The Internet Explorer update will also address vulnerabilities rated as critical that are unrelated to the Visual Studio bulletin that were privately and responsibly reported," Microsoft said.

Customers who are current with their security updates are protected from known attacks related to the updates, the company said. The updates will be released through the Microsoft Update, Windows Update and Windows Server Update services.

A webcast to address customer questions is scheduled for Tuesday from 13:00 to 14:00(PDT).

Microsoft typically releases security patches on a monthly basis, the second Tuesday of every month, and did not say why it is making this rare, out-of-cycle release.

Post a comment
Print

Post your comment

In order to post a comment you need to be registered and logged in.

Latest Security stories

Featured white papers

Vulnerability Management Buyer's Checklist

Qualys

Key Questions to Ask Before You Select a VM Solution Choosing a solution for Vulnerability Management (VM) is a critical step toward protecting your organisation's network and data. Without proven, automated technology for precise detection and remediation, no network can withstand the daily onslaught of new vulnerabilities that threaten security. To help finalise your decision on which solution to buy, Qualys provides this 12-point short list of considerations that will help you determine what will work best for your organisation.

Download now »
Creating a Dynamic Infrastructure through Virtualization

IBM

In almost every case,the transformation to a dynamic infrastructure will involve virtualization.Many IT professionals think of virtualization specifically in terms of servers.IBM,however,has a broader perspective,in which virtualization is seen as a generalapproach to decouple logical resources from physical elements,so that thoseresources can be allocated faster,more cost-effectively and more dynamically,wherever the business requires them in real time to ideally meet changingdemand levels or business requirements.

Download now »
How IP geolocation can improve your website experience and marketing activity

Quova

With geolocation technology, you can know a web user's real world whereabouts. This report examines the benefits from the fictional retailer's point of view. Things-4-You- a thriving online business, which had a poor record in converting online visitors into buying customers. Things-4-You demonstrates the potential of IP geolocation online. retailers.

Download now »