Microsoft Patches Critical Bugs In Internet Explorer
Microsoft on Tuesday released two security bulletins that patched four vulnerabilities in Internet Explorer--including the zero-day bug--and one in Windows 2000.
Microsoft on Tuesday released two security bulletins that patched four vulnerabilities its Internet Explorer browser and one in its Windows 2000 operating system. Two of the vulnerabilities were tagged by Microsoft as "critical."
As expected, one of the four fixes for IE is a patch for the zero-day vulnerability acknowledged by Microsoft in late November.
Microsoft's first bulletin, MS050-054, fixes four separate bugs in Internet Explorer, two of them marked with Microsoft's most serious label, critical.
Those two relate to IE's problem handling malicious COM objects and a more recent issue that's emerged with active scripting. Attackers exploiting the problems can grab control of a PC remotely, then do whatever they want with the compromised machine.
The other two flaws fixed Tuesday in IE were marked "moderate" by Microsoft.
All four issues affect virtually every version of IE still supported, including IE 5.0, 5.5, and 6.0. Even the more secure IE 6.0 running under Windows XP SP2 is vulnerable.
Some of the bugs rely on social engineering tricks -- one vulnerability lies in the how IE displays file download boxes -- but all require that users be duped into visiting malicious Web sites where exploits were waiting in ambush.
We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
2017 State of IT ReportIn today's technology-driven world, "innovation" has become a basic expectation. IT leaders are tasked with making technical magic, improving customer experience, and boosting the bottom line -- yet often without any increase to the IT budget. How are organizations striking the balance between new initiatives and cost control? Download our report to learn about the biggest challenges and how savvy IT executives are overcoming them.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.