Unscheduled update for Microsoft Internet Explorer
18 December 2008
17 December 2008 Microsoft released an unscheduled update for a publicly disclosed critical vulnerability in Internet Explorer.
Critical is Microsoft’s highest vulnerability rating.
More information is available from Microsoft’s Security Bulletin MS08-078.
An update that fixes the vulnerability is available from Windows automatic update mechanism for systems that support this. Alternatively, one may download updates from http://windowsupdate.microsoft.com.
It is very rare that Microsoft releases out-of-band security bulletins and patches. This indicates that this vulnerability is seen as very serious by Microsoft.
Norman has received information about customers that have been infected by malware that utilizes this vulnerability, and advices all affected users to download this security update as soon as possible, to be protected from potential exploits.
