Windows 7: Microsoft readies patch for gaping IE browser security holes

Microsoft plans to ship a high-priority Internet Explorer update next Tuesday to fix gaping holes in the world’s most widely deployed web browser.

The security holes in Internet Explorer could be exploited remotely by malicious hackers to launch remote code execution attacks, Microsoft warned. Vulnerabilities with a “critical” rating can typically be exploited to launch drive-by download attacks if a user simply surfs to a booby-trapped web site.

In all, Microsoft will release 6 bulletins this month to address at least 11 documented vulnerabilities in several software products.

In addition to the critical IE bulletin, this month’s Patch Tuesday batch will cover security vulnerabilities in Microsoft Windows, Microsoft Office, Forefront UAG, and .NET Framework.

Four of the six bulletins will be rated “critical,” Microsoft’s highest severity rating.