In a rare move, Microsoft on Friday said it would be releasing security updates on Tuesday--outside of its monthly patch cycle--for a critical vulnerability in Internet Explorer and a moderate vulnerability in Visual Studio.
The two security bulletins will address one overall issue and are being released separately "to provide the broadest protections possible to customers," Microsoft said in a statement....
bill
7:50 am on Jul 25, 2009 (gmt 0)
I found this part interesting at the end of the article:
Microsoft didn't give a reason for the rushed update but it may be trying to stay ahead of any public disclosure at next week's Black Hat security conference in Las Vegas.
jdMorgan
1:48 pm on Jul 25, 2009 (gmt 0)
It's really been a bad month for browser security. As of today, we have unpatched vulnerabilities in Sun Java JRE 6U14, Adobe Reader 9 and Flash Player 10, IE8, and SeaMonkey/1.1.17 (formerly Mozilla Suite).
Jim
JS_Harris
3:45 am on Jul 26, 2009 (gmt 0)
My IE is set to connect over LAN and resolved to ip 0.0.0.0 which completely disables it, that's not changing anytime soon. This is getting ridiculous in its regularity.
bill
1:43 am on Jul 27, 2009 (gmt 0)
My IE is set to connect over LAN and resolved to ip 0.0.0.0 which completely disables it
JS_Harris I've seen you mention this in various posts for several months now. I just wanted to point out to members that you shouldn't do this unless you know what you're doing. This sort of setting can stop the updates of multiple software packages that use IE's settings to connect to the Internet.
kaled
10:32 am on Jul 27, 2009 (gmt 0)
My IE is set to connect over LAN and resolved to ip 0.0.0.0 which completely disables it
I'm going to be blunt...
Disabling Internet Explorer by messing with its connection settings is utterly pointless.
Internet Explorer vulnerabilities affect Internet Explorer only - if you don't use Internet Explorer then these vulnerabilities do not affect you in any way.
As other have pointed out, this will break other legitimate applications that use these settings.
Use of these settings by other applications does NOT make them vulnerable.
Malware is unlikely to use these settings so disabling IE in this way is unlikely to protect you from any malware that is already present on your computer.
Kaled.
smconline
1:51 am on Jul 28, 2009 (gmt 0)
Ah crap! I just realized I'm reading these posts on IE8 now. Son of a @#$%&!
bill
1:17 am on Jul 29, 2009 (gmt 0)
The patches are available for me now from Japan. They should have the other markets available as well.
tedster
3:38 am on Jul 29, 2009 (gmt 0)
Yes - the IE blog confirms [blogs.msdn.com] that the update is now available.
