Microsoft Patches Critical Bugs In Internet Explorer - InformationWeek
IoT
IoT
News
News
12/13/2005
03:05 PM
50%
50%
RELATED EVENTS
[Best Practices] Managing Multiple Clouds
Jul 26, 2017
Putting all your eggs in one cloud basket is risky, because clouds are not immune to denials of se ...Read More>>

Microsoft Patches Critical Bugs In Internet Explorer

Microsoft on Tuesday released two security bulletins that patched four vulnerabilities in Internet Explorer--including the zero-day bug--and one in Windows 2000.

Microsoft on Tuesday released two security bulletins that patched four vulnerabilities its Internet Explorer browser and one in its Windows 2000 operating system. Two of the vulnerabilities were tagged by Microsoft as "critical."

As expected, one of the four fixes for IE is a patch for the zero-day vulnerability acknowledged by Microsoft in late November.

Microsoft's first bulletin, MS050-054, fixes four separate bugs in Internet Explorer, two of them marked with Microsoft's most serious label, critical.

Those two relate to IE's problem handling malicious COM objects and a more recent issue that's emerged with active scripting. Attackers exploiting the problems can grab control of a PC remotely, then do whatever they want with the compromised machine.

The other two flaws fixed Tuesday in IE were marked "moderate" by Microsoft.

All four issues affect virtually every version of IE still supported, including IE 5.0, 5.5, and 6.0. Even the more secure IE 6.0 running under Windows XP SP2 is vulnerable.

Some of the bugs rely on social engineering tricks -- one vulnerability lies in the how IE displays file download boxes -- but all require that users be duped into visiting malicious Web sites where exploits were waiting in ambush.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll