Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register
 RECENT ENTRIES
 Litigants to AOL: Thanks for nothing
 Yahoo imposes unpaid winter break
 WebEx to launch AppExchange rival
 Google to call for energy efficiency
 Big-name sites outted for XSS holes
 SaaScon trumpets next-gen computing
 Helmi open-sourcing AJAX platform
 Will Tiger help you birdie SOA?
 Virgin eases laptop restriction
 Symantec assesses security


 About the Author
 Contact Tech Watch

 ARCHIVES
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
November 2005
October 2005
September 2005
August 2005
July 2005
June 2005
May 2005
April 2005
March 2005
February 2005
January 2005
December 2004
November 2004
October 2004
September 2004
August 2004
July 2004
June 2004
May 2004
April 2004
March 2004
February 2004
January 2004
December 2003
November 2003
October 2003
September 2003
August 2003
July 2003
March 2003

Powered By
Movable Type 3.17

 INFOWORLD BLOGS


 BLOGROLL
 Adam Bosworth
 Scripting News
 Robert Scoble
 Many 2 Many
 Crazy Apple Rumors
 Dan Gillmor
 Jonathan Schwartz
 Doc Searls
 Bruce Schneier
 Joel Spolsky
 Web Standards Project
 Peter O'Kelly
 The Standard's Guest Blog
 Technology Review
 PCWorld's Techlog

 RSS FEEDS
How this works

 Top News 
 Columnists 
 Tech Watch 
 Test Center Reviews 
 Applications 
 App Development 
 E-Business Solutions & Strategies 
 End-user Hardware 
 Networking 
 Operating Systems 
 Platforms 
 Security 
 Standards & Protocols 
 Storage 
 Telecommunications 
 Wireless 
 Web Services 


 INFOWORLD TECH WATCH 




September 26, 2006

Microsoft issues emergency patch for VML hole
Filed under: Security

Microsoft has broken from its monthly patch cycle to issue MS06-055, a fix for the Vector Markup Language (VML) hole in the Internet Explorer Browser that was identified just one week ago and has been causing problems ever since. From a company email statement:

"Microsoft released security update MS06-055, outside of the regular monthly update release schedule, to help protect customers from exploitation of a publicly known vulnerability in the Windows operating system, in response to malicious and criminal attacks on computer users that were recently discovered.


MS06-055 addresses a vulnerability in Vector Markup Language rendering, a component of Windows, and has a maximum severity rating of Critical. The update addresses a vulnerability that could allow an attacker to take complete control of a system remotely.

Microsoft originally planned to release the update on Tuesday, October 10, 2006 as part of its regular monthly release of security bulletins. However, Microsoft is aware of the existence of a public attack utilizing the vulnerability. Since testing has been completed earlier than anticipated, Microsoft has released the update ahead of schedule to help protect customers.

Microsoft’s monitoring of attack data continues to indicate that the attacks and customer impact is limited, however Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary. Microsoft continues to encourage all customers to download MS06-055 immediately to protect themselves from current exploitation."

Posted by Paul Roberts on September 26, 2006 02:06 PM | TrackBack (0)
E-mailE-mail This print thisPrint This



Comments

Post a comment











Remember me?








Add to Technorati Favorites




RESOURCE CENTERadvertisement 
Ads by techwords beta      See your link here




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS  IT EXEC-CONNECT   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist