Saturday, September 16, 2006

Are we seeing a trend here ?

Patch Tuesday now seems to be followed by Attack Thursday on a regular basis. Attackers are aware of the Microsoft schedule and now lay in wait. The new exploits they release will have 30 days of freedom to do their dirty work - if Microsoft issues a patch for the exploit that works. [ This months updates contained the third version of an IE fix - the first two were useless ]

Those of us using Opera or Firefox are, of course, not interested in this post.

============================================================
Microsoft IE6 Security Advisory


Microsoft is investigating new public reports of vulnerability in Microsoft Internet Explorer on Windows 2000 Service Pack 4, on Windows XP Service Pack 1, and on Windows XP Service Pack 2.

Microsoft has tested the following workarounds. Although these workarounds will not correct the underlying vulnerability, they help block known attack vectors.


The Microsoft Security Advisory may be read HERE.
Then scroll down to General Information ---> Suggested Actions ---> Workarounds

0 Comments:

Post a Comment

<< Home