From: InfoSec News (alertsinfosecnews.org)
Date: Fri Jul 10 2009 - 03:50:06 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

http://www.theregister.co.uk/2009/07/09/microsoft_july_patch_tuesday_advance/

By Dan Goodin in San Francisco
The Register
9th July 2009

Microsoft on Tuesday plans to release updates patching three critical
Windows security vulnerabilities, two of which are already under attack.

One of the updates plugs a hole in an Internet Explorer component that
handles online video. Hundreds of thousands and possibly millions of
websites - mostly catering to Chinese-speaking visitors - have been
hijacked so that they secretly point to servers that exploit the
critical vulnerability, creating what Microsoft has called a
"browse-and-get-owned" experience for the people unfortunate enough to
visit them.

"Our engineering teams have been working around the clock to produce an
update for the issue discussed in Security Advisory 972890
(vulnerability in the Microsoft Video ActiveX Control) and we believe
that they will be able to release an update of appropriate quality for
broad distribution that protects against the attacks," Microsoft's Jerry
Bryant writes here.

(Microsoft has already released a temporary fix for the bug. If you
haven't installed it, you should do so now).

[...]

_______________________________________________
Attend Black Hat USA, July 25-30 in Las Vegas,
the world's premier technical event for ICT security experts.
Network with 4,000+ delegates from 50 nations.
Visit product displays by 30 top sponsors in
a relaxed setting. http://www.blackhat.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]