[ insider_reports_insider ]
Microsoft Plans Five Fixes For Patch Tuesday
David Utter
Staff Writer
2006-04-07
 Insider Reports RSS Feed
At least one update to be delivered with the next round of patches addresses a Critical-rated issue, the createTextRange() vulnerability in Internet Explorer.
 | | Microsoft Gets to Fixin' |  |
Despite the severity of the code execution vulnerability unveiled on March 22nd, and the presence of exploit code in the wild, Microsoft chose to delay the release of the patch for that vulnerability until its regularly scheduled update.
Generally referred to as Patch Tuesday, and frequently with epithets and other unkind words prepended by system administrators, Microsoft's regular patch release cycle happens on the second Tuesday of each month, unless there are no patches scheduled for that time.
The severity of the flaw in Internet Explorer appeared to be one that would prompt Microsoft to release a fix outside of the normal release cycle. A pair of security companies released patches they created to serve as temporary fixes until Microsoft released a formal patch.
Microsoft and Secunia both advised Internet Explorer users to disable Active Scripting in Internet Explorer to mitigate the threat of the exploit. A Critical rating from Microsoft means a patch addresses a threat "whose exploitation could allow the propagation of an Internet worm without user action."
Microsoft also advised users it could not recommend either of the third-party patches available from eEye or Determina, as both make modifications to Windows that could impact its operation or that of other software.
The April 11th update will be picked up automatically by systems running the Automatic Updates service in Windows. Those updates will be available online at Microsoft's Windows Update site too.
Four of the fixes, including the one for createTextRange(), will update Windows; the criticality of the other fixes won't be known until they have been released. The fifth update affects Office and Windows; Microsoft rated that fix as Moderate.
---
Tag: Microsoft
Add to | DiggThis | Yahoo! My Web | PreFound.com
Get all the updates in RSS: 
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
