XML zero day fix arrives next week

Microsoft pushes nine patches.

Microsoft will next week patch a zero-day vulnerability in XML Core Services that is actively exploited in attacks on Internet Explorer.

Remond issued a temporary Fix-It solution for the hole, but many IT administrators were seeking a permanent fix, especially with news that the exploit has been added to popular toolkits like BlackHole.

The company's latest patch Tuesday release is comprised of nine fixes to address 16 vulnerabilities.

The patches cover weaknesses in Windows, Office, Internet Explorer (IE) and Visual Basic for Applications.

A vulnerability in Internet Explorer 9 also gained attention. Though the flaw only affected the most recent edition of the web browser, an IE fix will catch some off guard because Microsoft typically updates the software once every two months -- and a cumulative patch last came in June.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition
XML zero day fix arrives next week
Company/Organisation
Technology

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read