Microsoft Supplies 'Critical' Patch for IE

May 16 -- Microsoft has issued a patch for six vulnerabilities within IE 5.1, 5.5 and 6.0 browsers. Describing the bugs as "critical," Microsoft urged in an security bulletin that the patch should be downloaded by anyone using IE 5.1, 5.5 or the newest 6.0 versions.

Some of the bugs the patch fixes: a buffer overflow hole that could give an attacker complete control of a user's machine and another vulnerability that would let an attacker view files on an IE user's local drive. The most serious of these vulnerabilities (according to Microsoft) involves the way the IE 6.0 browser handles "content-disposition" and "content-type" header fields within HTML streams. This bug would let an attacker change HTML header information, affecting how IE handles downloads. Some serious holes here -- I would suggest that all of you who are currently using Internet Explorer read the article below and download the patch.

Microsoft Supplies 'Critical' Patch for IE (InternetNews.com, May 16)

Microsoft Security Bulletin on Their New Patch

• Subscribe
• RSS

• Editorial
• Specials
• Community
• News
• Tech and Tags
• Views
• Reviews
• Techniques
• Security
• Best of ColdFusion Talk
• Knowledge Base
• Blog Watch

• Tipical Charlie