XML zero day fix arrives next week

By

Microsoft pushes nine patches.

Microsoft will next week patch a zero-day vulnerability in XML Core Services that is actively exploited in attacks on Internet Explorer.

XML zero day fix arrives next week

Remond issued a temporary Fix-It solution for the hole, but many IT administrators were seeking a permanent fix, especially with news that the exploit has been added to popular toolkits like BlackHole.

The company's latest patch Tuesday release is comprised of nine fixes to address 16 vulnerabilities.

The patches cover weaknesses in Windows, Office, Internet Explorer (IE) and Visual Basic for Applications.

A vulnerability in Internet Explorer 9 also gained attention. Though the flaw only affected the most recent edition of the web browser, an IE fix will catch some off guard because Microsoft typically updates the software once every two months -- and a cumulative patch last came in June.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

"VoidProxy" PhishKit targets Google and Microsoft users

"VoidProxy" PhishKit targets Google and Microsoft users

First npm worm "Shai-Hulud" released in supply chain attack

First npm worm "Shai-Hulud" released in supply chain attack

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

Log In

  |  Forgot your password?