Windows IE Out Of Band Patch

I’m excited to see that Microsoft is releasing a patch for the latest crop of IE vulnerabilities tomorrow, December 17th (as announced on Technet).

Frankly, this one had me nervous enough to cause me to send an “all staff” email this morning urging everyone to use alternative browsers:

There are currently some major unpatched vulnerabilities with all versions of Internet Explorer — including IE 7. There are many web sites now out there ready to exploit those patches. In fact, in some cases shopping or finance sites have been “hijacked” for just these purposes.

(for more info see these eweek.com or BBC articles. Also, Microsoft’s advisory .)

[…]

So yeah, good timing I say! Glad to not be waiting until 2nd Tuesday in January.

It’s very easy to just glibly say, “Don’t use Internet Explorer” but for some folks that’s a very major change and pulls them out of their comfort/competence level. Not everyone is comfortable changing browsers and I really try to accommodate that as much as possible.

Possibly Related posts:

1. Are you still using Internet Explorer? New Exploit
2. Windows XP WiFi: The Missing Patch
3. Firefox 2.0.0.5
4. Internet Explorer 7 released
5. WMF vulnerability – official patch released!