The Channel logo

News

By | John Leyden 4th February 2011 10:44

Zero-day update duo to star in upcoming Patch Tuesday update

But MHTML fix remains MIA

Microsoft plans to release a dozen bulletins on Tuesday – three of which address critical flaws.

The February Patch Tuesday batch includes a fix for a critical Windows thumbnail preview flaw as well as patching an equally serious flaw in how Internet Explorer handles Cascading Style Sheets (CSS). Each of these zero-day vulnerabilities has been exploited in limited hacking attacks.

The remaining updates address lesser flaws in Windows, Office, Microsoft's IIS web server software and Redmond's development platform, Visual Studio.

Net security services firm Qualys notes that a fix for a recently discovered MHTML flaw in Windows/Internet Explorer will not be addressed by the February Patch Tuesday update. Users are advised to apply Microsoft's workaround, pending the availability of a more comprehensive fix. ®

alert Send corrections

Opinion

Privacy image

Frank Jennings

Two working parties, ministers galore... but data transfer law remains in limbo
EMC_Unity_bezel

Chris Evans

It does simplify the hardware setup, whatever it is
A microscopic view of the biometric shark skin. Pic: James Weaver

Chris Mellor

Do something and stop faffing about in the bush league

Kat Hall

International system in general needs greater transparency

Features

Nerd fail photo via Shutterstock
Shouting match
Single market vs. rest of the world
hacker
Mostly it's financial crime. Here's what all the cool kids' terms mean in English
Apple logo. Pic: Blake Patterson
Plenty of bumps in the 40-year road for Mac makers