Microsoft to release emergency patch for zero-day flaw

Filed Under: Vulnerability

Critical

Good news.

Microsoft has announced that tomorrow (Wednesday, 17 December) it will release an emergency out-of-band patch for the critical security hole that has been sending a chill down the spine of Internet Explorer users.

Concerns about the security bug escalated as it was discovered that it affected not only version 7 of Internet Explorer, but also IE 5.01 SP4, IE 6, IE 6 SP1, and IE 8 Beta 2. Attacks incorporating the exploit have also been seen on websites around the world, potentially putting Internet Explorer users at risk in the absence of a patch.

Microsoft will have been working feverishly to put a patch together that can defend all the different versions of Internet Explorer, and testing that it works as expected. Within 24 hours the patch should be available for anyone to download, and fingers crossed computer users will be applying it without hesitation.

Sophos has published its own analysis (with further information here) of the severity of the vulnerability that I would recommend you read if you haven't already done so.

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.