[ news_security_news ] EEye Spots IE, Outlook Install Issue
David Utter Staff Writer
2005-09-07
Insider Reports RSS Feed
More vulnerability problems for Redmond, as the eEye security firm notes the presence of a new vulnerability.
Internet Explorer, Outlook, and Outlook Express contain a remote code execution vulnerability in their default installs, eEye reported on September 1 in an upcoming advisory notice. Currently, the flaw seems to affect Windows 2000 and Windows XP SP0 and SP1.
Details of the vulnerability have not been disclosed, pending Microsoft's action on the problem. Microsoft does not discuss vulnerabilities until it releases a patch for them. The next regularly scheduled patch release comes on September 13, the second Tuesday of the month.
Microsoft adopted the "Patch Tuesday" schedule and rarely releases patches outside the monthly cycle. The publicity associated with Microsoft's patch releases has led some software firms to schedule their security updates around the same time, hoping that their flaws get overlooked in the flood of attention paid to updates for Windows or Internet Explorer.
Microsoft's last security bulletin release on August 9 led to the debut of the Zotob worms on August 14. Authorities in Turkey working with the cooperation of the FBI and Microsoft arrested an 18 year old virus writer believed to be a central figure in the creation of Zotob and the Mytob worms.
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|