CGISecurity Logo

Microsoft issues emergency patch for IE

"Microsoft will push out an emergency security patch for Internet Explorer on Wednesday, addressing a critical security hole currently being exploited in the wild.

Redmond issued advanced notice for tomorrow's fix, describing the out-of-cycle patch as protection from "remote code execution."

Unscheduled updates are pretty rare for Microsoft, stressing the
potentially serious nature of the flaw. Although the last time
Microsoft broke it's update cycle was in late October – it was the first time it had done so in about 18 months.

The latest zero-day vulnerability stems from data binding bugs that
allows hackers access to a computer's memory space, allowing attackers
to remotely execute malicious code as IE crashes, Microsoft has said."

Read More: http://www.theregister.co.uk/2008/12/16/microsoft_ie_emergency_patch_warning_dec_16_2008/ Patch Link: http://update.microsoft.com/