Microsoft Releases Updates to Fix Severe Vulnerabilities in Internet Explorer

Microsoft has released security updates to correct five new vulnerabilities in Internet Explorer (IE) 8.0 (and earlier), running on all current versions of Windows (including Windows 7 and Windows Server 2008) that could allow an attacker to infuse web pages with malicious code, even web pages that are legitimate. Attackers entice users to visit a web page (some of which are normally safe) that they’ve infested with malicious code and can use the vulnerabilities in IE to execute the code on the user’s machine, possibly gaining full control over it.

3D Corporation is deploying patches on the networks of 3DProActive Managed and Partner clients to eliminate risks posed by these vulnerabilities. As 3D is still patching machines using Windows 2000, this issue is also not a threat for Windows 2000 machines that are fully patched.

Other Windows users that are not 3DProActive Managed or Partner clients should immediately download the appropriate Internet Explorer patches found in Microsoft Security Bulletin MS09-072 - Critical or allow the Windows Update utility to download the patches automatically.

3D provides businesses with security solutions that can eliminate risks like these automatically. To find out how 3D can make your network worry-free, visit our website at http://www.3dcorp.us/.

References: WatchGuard's LiveSecurity Service Update "Urgent: December Cumulative IE Update Corrects Five Critical Vulnerabilities," Microsoft Security Bulletin MS09-072 - Critical