Microsoft Patches Critical Windows Flaw

November 14th, 2007

Microsoft released two security updates on Tuesday to patch two vulnerabilities, one rated “critical” and the other “important.” The small number of November updates contrasts with the series of Patch Tuesday summer releases that numbered as high as 17 vulnerabilities.The critical vulnerability addressed on Tuesday could be exploited through malicious Web sites, while the important-rated vulnerability could make way for hackers to redirect Internet traffic from legitimate sites to fake ones.

These patches again emphasize the need for proactive browser protection and the risk of surfing the Web unprotected, according to Dave Marcus, research and communication manager at McAfee Avert Labs. “The critical Windows URI handling vulnerability is already being exploited,” he said. “A Windows XP or Windows Server 2003 user with Internet Explorer 7 installed can become a victim by simply clicking a malicious Web link.”

Click here to read the rest of this story on NewsFactor.

Entry Filed under: Hot off the Press