Microsoft issues emergency critical IE patch; fixes 8 holes

Analysis
Jan 21, 20101 min

Microsoft IE patch fixes hole used in Google attack, among other vulnerabilities

As expected, Microsoft today released MS10-002 to address multiple vulnerabilities in Internet Explorer — eight all told. This includes the Remote Code Execution vulnerability responsible for the so-called Google attacks (as reported in Microsoft’s Security Advisory 979352).

This patch is rated critical for all supported releases of Internet Explorer: From IE 5.x through IE 8. The patch is rated moderate for IE 6 included with Windows Server 2003. Microsoft says that there are no known issues with the patch and recommends that you install it as soon as possible.

Most of the attacks in the wild were seen with Internet Explorer 6.

Like this post? Check out these others.

  • 7 big IT orgs that showed Microsoft the door
  • Most business will adopt Windows 7 by 2011, but prefer Google’s cloud
  • Watch out Microsoft: GNOME is poised to have a killer 2010
  • Microsoft Exchange/Outlook 2010 UC Mobile and Voicemail Features (Beta) Release!
  • Windows 7 Remote Admin Tools: Controls Windows Server 2008 from your Windows 7 desktop
Plus, visit the Microsoft Subnet web site for more news, blogs, podcasts. Subscribe to all Microsoft Subnet bloggers. Sign up for the bi-weekly Microsoft newsletter. (Click on News/Microsoft News Alert.)

Follow All Microsoft Subnet bloggers on Twitter

Follow Julie Bort on Twitter