Internet Explorer cumulative patch released!

Question

New Cumulative Security Patch elimintates 2 new vulnerablilities found in Microsofts Internet Explorer.

Answer

This question was answered on June 4, 2003. Much of the information contained herein may have changed since posting.

Microsoft has released a new cumulative patch for Windows Internet Explorer 5.01, 5.5 & 6.0. This patch includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0 and eliminates two newly discovered vulnerabilities.

In order to exploit these flaws, the attacker would have to create a specially formed HTML email and send it to the user. Alternatively an attacker would have to host a malicious web site that contained a web page designed to exploit these vulnerabilities. The attacker would then have to persuade a user to visit that site.

Microsoft encourages all customers to review the Security Bulletin to keep optimal security. The risk is considered ‘critical’ which is the highest security breach they have.

Download locations for this patch:

The patches for all Windows systems are available via:

Windows Update

The complete technical details are posted at the Microsoft web site:

<a href="http://www.microsoft.com/technet/security/bulletin/MS03-020.asp"> http://www.microsoft.com/technet/security/bulletin/MS03-020.asp</a>

Author

Posted by Michal of Data Doctors on June 4, 2003