Microsoft to fix Internet Explorer hole

Powered by SC Magazine
 

Patch Tuesday to include nine fixes for 21 vulnerabilities.

Microsoft will this week issue nine security bulletins to fix 21 vulnerabilities, with four labelled "critical" and the rest "important".

The company on Thursday said the critical fixes would address flaws that could allow remote code execution in Windows, Internet Explorer, .NET Framework, and Silverlight, Microsoft's web development tool.

"Important" patches would address bugs in the Office suite, as well as server software, that could allow privilege escalation attackers to access more than intended through privilege escalation.

Wolfgang Kandek, CTO at vulnerability management firm Qualys, said the critical update to Internet Explorer should receive the highest priority, as criminals were ramping up their use of browser-based attacks.

"A couple of years ago, email was the most prevalent method of attack," Kandek said.

"Today, it is web browsers."

To illustrate his point, Kandek highlighted a vulnerability that was patched 10 January by Microsoft but was exploited roughly two weeks later.

The attack was delivered through the browser and involved a malicious audio file played via the Windows Media Player.

As usual, Microsoft advised users to apply these patches via Microsoft Update, Windows Update and the Microsoft Download Center to keep their software up to date.

Mac users can receive uploads automatically with Microsoft AutoUpdate for Mac.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Microsoft to fix Internet Explorer hole
 
 
 
Top Stories
Abbott brings back Science minister in cabinet reshuffle
Science tacked onto to Industry title.
 
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Xero prepares for key feature coming in 2015
Dec 19, 2014
Xero users will be able to track how their business is comparing to other Xero users.
More 4G from Optus in Darwin
Nov 21, 2014
Click to see where Optus has expanded coverage to the suburbs near Darwin.
Optus steps up regional 4G coverage
Nov 20, 2014
Once 700Mhz services are working, Optus claims regional users will have a "faster and more ...
This Huawei 4G phone costs $99
Nov 12, 2014
The $99 Huawei Ascend Y550, available through Vodafone, enters the budget market as one of the ...
4G smartphones: Microsoft's Lumia 830
Nov 7, 2014
Microsoft has announced its flagship Windows Phone, the Nokia Lumia 830 4G, will be available in ...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  4%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  3%
 
A Federal Government agency (ATO, Centrelink etc)
  19%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1919

Vote
Do you support the abolition of the Office of the Information Commissioner?