[ISN] Three 'critical' Windows fixes due on Patch Tuesday

From: InfoSec News <alerts_at_private>
Date: Fri, 10 Jul 2009 03:50:06 -0500 (CDT)
http://www.theregister.co.uk/2009/07/09/microsoft_july_patch_tuesday_advance/

By Dan Goodin in San Francisco
The Register
9th July 2009

Microsoft on Tuesday plans to release updates patching three critical 
Windows security vulnerabilities, two of which are already under attack.

One of the updates plugs a hole in an Internet Explorer component that 
handles online video. Hundreds of thousands and possibly millions of 
websites - mostly catering to Chinese-speaking visitors - have been 
hijacked so that they secretly point to servers that exploit the 
critical vulnerability, creating what Microsoft has called a 
"browse-and-get-owned" experience for the people unfortunate enough to 
visit them.

"Our engineering teams have been working around the clock to produce an 
update for the issue discussed in Security Advisory 972890 
(vulnerability in the Microsoft Video ActiveX Control) and we believe 
that they will be able to release an update of appropriate quality for 
broad distribution that protects against the attacks," Microsoft's Jerry 
Bryant writes here.

(Microsoft has already released a temporary fix for the bug. If you 
haven't installed it, you should do so now).

[...]


_______________________________________________      
Attend Black Hat USA, July 25-30 in Las Vegas, 
the world's premier technical event for ICT security experts.
Network with 4,000+ delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com
Received on Fri Jul 10 2009 - 01:50:06 PDT

This archive was generated by hypermail 2.2.0 : Fri Jul 10 2009 - 02:01:03 PDT