* Microsoft Out Of Band Patch Release

Published: 2010-01-21
Last Updated: 2010-01-21 20:21:55 UTC
by Chris Carboni (Version: 1)
2 comment(s)

Microsoft released the out of band security bulletin and patch it announced yesterday. MS10-002 is a cumulative patch for Internet Explorer. It fixes a total of 8 vulnerabilities. The "famous" vulnerability that triggered the release, CVE-2010-0249, is currently being exploited. According to the bulletin, none of the other vulnerabilities are currently being exploited and all had been disclosed to Microsoft directly without any prior public disclosure.

Given the number of ever improving exploits against CVE-2010-0249, and the publicly known use of these exploits, we recommend that you patch as soon as possible.

2 comment(s)


Note that a security update for Silverlight was released on Tuesday, January 19th. No bulletin, but http://support.microsoft.com/kb/979202 claims "This update includes functional, performance, reliability, and security improvements."
We rolled this out to our Citrix environment last night and our sys admins are saying it is causing major issues with XenApp. No solid confirmation, but I would advise anyone relying on Citrix XenApp to test carefully!

Diary Archives