Microsoft patches crucial IE9, Windows bugs

Computerworld - Microsoft these days patched thirty four vulnerabilities in Windows, net Explorer (IE), workplace and alternative software, fifteen of them labeled "critical" by the corporate.

The large range of updates -- additionally because the proven fact that Microsoft issued them 2 hours later than usual -- can place pressure on enterprise directors, one skilled said.

"No doubt IT directors can ought to choose and opt for where to act 1st," said Wolfgang Kandek, chief technology officer for Qualys.

Of the sixteen updates, that Microsoft calls bulletins, 9 were pegged crucial, the most-serious rating within the company's four-step scoring system, whereas the remaining seven were tagged "important," the next-most-dangerous class.

While the amount of bugs patched these days was considerably but the record sixty four Microsoft mounted in April, it had been the second-highest total for the year. The sixteen bulletins were only one off the record, additionally set last April.

Fifteen of the thirty four total vulnerabilities were rated crucial, seventeen were ranked necessary, and 2 were marked as "moderate."

Microsoft picked four of the sixteen updates to focus on, and urged customers to roll out the quartet as soon as potential.

"Our prime priorities are MS11-050, MS11-052, MS11-043 and MS11-042," Jerry Bryant, cluster manager with the Microsoft Security Response Center (MSRC), said in an interview earlier these days. Bryant listed the four within the order of priority.

Among the deploy-immediately bulletins, MS11-050 offered eleven patches for IE that Microsoft and freelance consultants pinned to the highest of their lists.

"This one is at the highest of the list, because it invariably is when Microsoft patches IE," said Andrew Storms, director of security operations for nCircle Security. "But it is also the primary IE9 update, and definitely will look to be true that Microsoft had this bug at the time it launched IE9, or some days later."

Storms was pertaining to Microsoft's testing method, that sometimes lasts 2 months or additional. That timeline would have precluded an IE9 patch in April, the primary update scheduled when the browser shipped.

Microsoft habitually patches IE on even-numbered months; the last time it issued a security update for its browser was in April, when it mounted 5 flaws. Today's, however, was the primary crucial update for IE9, the browser that Microsoft shipped in mid-March. Four of the eleven patches in MS11-050 affected IE9, said Microsoft.

Nine of the eleven bugs in IE that Microsoft patched these days may well be exploited by attackers with a "drive-by" attack that needs users to easily visit a malicious net web site.

MS11-052 additionally affected IE, though Microsoft labeled it as a Windows update.

"The vulnerability is in Windows, however the attack vector is thru net Explorer," said Bryant. "But IE9 isn't stricken by this update. [The issue] was addressed before IE9 released..., thus that is a part of the 'newer is better' message we're obtaining out to customers," Bryant added.
http://technologyforearth.blogspot.com/