Microsoft promises emergency IE patch

Microsoft promises emergency IE patch

VULNERABILITIES

Microsoft today announced that it will issue an emergency security update for Internet Explorer (IE), but postponed setting a ship date for the fix until tomorrow.

"Given the significant level of attention this issue has generated, confusion about what customers can do to protect themselves and the escalating threat environment, Microsoft will release a security update out-of-band for this vulnerability," said George Stathakopoulos…in an entry on the Microsoft Security Response Center blog. … Researchers have been busy building exploits since the original attack code went public last

Thursday. Today, for example, a noted American vulnerability researcher and a French security company disclosed that they had created exploits that worked on the newer IE7 and IE8, and could bypass the DEP (data execution prevention) protection that Microsoft has been touting since it acknowledged the bug.

As he did over the weekend, Stathakopoulos downplayed the threat again today. "We continue to see very limited, and in some cases, targeted attacks," he said, adding that th eonly successful attacks found thus far have aimed at IE6.

Date: 19 January 2010

More...........http://www.computerworld.com/s/article/9146038/

1969 Cougar