Cumulative IE Patch Addresses Critical Vulnerabilities

Microsoft has released a critical cumulative Internet Explorer update last Wednesday that corrected the six newly discovered vulnerabilities and behavioural change Web browser.

Of the security bulletin MS02 - 023, the third time, and the cumulative patch IE browser, and the fifth time this year, in November 2001. In short, the five-year cumulative patch includes repairing 20 newly discovered security flaws, the key issue in a cumulative patch. Each cumulative patch is defined as to include all previously identified IE flaw.

Three of the vulnerabilities in the latest cumulative patch was designated as a key threat to the size of Microsofts. Cross-site scripting HTML resources in the local problems, namely, 6.0, a partial disclosure of information, through an object of HTML, that is, 5.01, 5.5 and 6.0, and a script read biscuits affect internal biscuits, that is, 5.5 and 6.0.

Less serious security flaws, including one with the vulnerability of deception, through a special website and two new variants on what Microsoft calls "content disposal" vulnerability.

Finally, the change means that the plaque is treated in the restricted sites zone frame. With the patch applied, the frame is prohibited in the restricted zone, in order to protect and Outlook Express and Outlook users to automatically open the HTML e-mail or launch new window to download the executable file.

Repair procedure applies to http://www.microsoft.com/technet/security/bulletin/ms02-023.asp.