http://www.theregister.co.uk/2009/07/09/microsoft_july_patch_tuesday_advance/ By Dan Goodin in San Francisco The Register 9th July 2009 Microsoft on Tuesday plans to release updates patching three critical Windows security vulnerabilities, two of which are already under attack. One of the updates plugs a hole in an Internet Explorer component that handles online video. Hundreds of thousands and possibly millions of websites - mostly catering to Chinese-speaking visitors - have been hijacked so that they secretly point to servers that exploit the critical vulnerability, creating what Microsoft has called a "browse-and-get-owned" experience for the people unfortunate enough to visit them. "Our engineering teams have been working around the clock to produce an update for the issue discussed in Security Advisory 972890 (vulnerability in the Microsoft Video ActiveX Control) and we believe that they will be able to release an update of appropriate quality for broad distribution that protects against the attacks," Microsoft's Jerry Bryant writes here. (Microsoft has already released a temporary fix for the bug. If you haven't installed it, you should do so now). [...] _______________________________________________ Attend Black Hat USA, July 25-30 in Las Vegas, the world's premier technical event for ICT security experts. Network with 4,000+ delegates from 50 nations. Visit product displays by 30 top sponsors in a relaxed setting. http://www.blackhat.comReceived on Fri Jul 10 2009 - 01:50:06 PDT
This archive was generated by hypermail 2.2.0 : Fri Jul 10 2009 - 02:01:03 PDT