Technology news and Jobs 
VIRTUALISATION Triple-critical Microsoft Patch Tuesday ahead
VIRTUALISATION Triple-critical Microsoft Patch Tuesday ahead | Triple-critical Microsoft Patch Tuesday ahead |
|
| by Stephen Withers | |
| Friday, 10 July 2009 | |
|
Page 1 of 2   
Featured Whitepaper
5 Best Practices for Smartphone Support
The company is preparing to release three critical fixes for Windows this month (plus three for other software), and has already revealed the nature of two of them. A vulnerability in the MPEG2TuneRequest ActiveX Control Object is reportedly being exploited via thousands of compromised web sites in China and other parts of Asia. Microsoft has warned that "A browse-and-get-owned attack vector exists" for this flaw. Merely opening a web page containing an exploit will give the attacker control of the computer. On Monday, Microsoft recommended kill-bitting the object as a way of protecting systems against these attacks, and provided an automatic means of doing so. (Kill-bits can be manually set by editing the Registry.) Although some reports have suggested Microsoft has moved with unusual speed to include a full fix as part of July's security updates, that is misleading. Microsoft itself has pointed out that the original report of this issue was made by IBM's X-Force in (northern) Spring 2008 - that's well over a year ago. Please read on for more details of this and other vulnerabilities to be fixed next Tuesday. |
| < Next story in category | Previous story in the category > |
|---|
