Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

MS10-018 - Critical Internet Explorer update now available

Microsoft issued an out-of-band special security update for all versions of Internet Explorer.  While the most critical update applies to IE 6 and 7, there are also some critical updates for version 8.  The planned IE cumulative update for April 13, 2010 was released for all users two weeks early.

MS10-018 - Critical Internet Explorer Update
http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx

MSRC - MS10-018 Detailed analysis
http://blogs.technet.com/msrc/archive/2010/03/30/security-bulletin-ms10-018-released.aspx

QUOTE: MS10-018 is a typical cumulative update for Internet Explorer and was originally going to be released during the normal update cycle on the 13th of April.

SANS - Internet Storm Center analysis
http://isc.sans.org/diary.html?storyid=8533

QUOTE: This update resolves 10 different vulnerabilities in Internet Explorer, of which the most severe impact can be execution of arbitrary code. All versions of IE from 5.01 to 8.0 are affected to varying degrees. Both servers and workstations should be updated. The update replaces MS10-002, and addresses the MS Advisory 981374 vulnerability. Time to patch