IoT
News
News
12/13/2005
03:05 PM
50%
50%
RELATED EVENTS
The Analytics Job and Salary Outlook for 2016
Jan 28, 2016
With data science and big data top-of-mind for all types of organizations, hiring analytics profes ...Read More>>

Microsoft Patches Critical Bugs In Internet Explorer

Microsoft on Tuesday released two security bulletins that patched four vulnerabilities in Internet Explorer--including the zero-day bug--and one in Windows 2000.

Microsoft on Tuesday released two security bulletins that patched four vulnerabilities its Internet Explorer browser and one in its Windows 2000 operating system. Two of the vulnerabilities were tagged by Microsoft as "critical."

As expected, one of the four fixes for IE is a patch for the zero-day vulnerability acknowledged by Microsoft in late November.

Microsoft's first bulletin, MS050-054, fixes four separate bugs in Internet Explorer, two of them marked with Microsoft's most serious label, critical.

Those two relate to IE's problem handling malicious COM objects and a more recent issue that's emerged with active scripting. Attackers exploiting the problems can grab control of a PC remotely, then do whatever they want with the compromised machine.

The other two flaws fixed Tuesday in IE were marked "moderate" by Microsoft.

All four issues affect virtually every version of IE still supported, including IE 5.0, 5.5, and 6.0. Even the more secure IE 6.0 running under Windows XP SP2 is vulnerable.

Some of the bugs rely on social engineering tricks -- one vulnerability lies in the how IE displays file download boxes -- but all require that users be duped into visiting malicious Web sites where exploits were waiting in ambush.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Register for InformationWeek Newsletters
White Papers
Current Issue
How to Knock Down Barriers to Effective Risk Management
Risk management today is a hodgepodge of systems, siloed approaches, and poor data collection practices. That isn't how it should be.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.