29 July 2009
Microsoft released 28 July 2009 two unscheduled updates for a critical vulnerability in Internet Explorer and a moderate vulnerability in Visual Studio Active Template Library.
Critical is Microsoft’s highest vulnerability rating.
More information is available from Microsoft’s Security Bulletin MS09-034 and MS09-35.
Updates that fixes the vulnerabilites are available from Windows automatic update mechanism for systems that support this. Alternatively, one may download updates from http://windowsupdate.microsoft.com.
It is very rare that Microsoft releases out-of-band security bulletins and patches. This indicates that these vulnerabilities are seen as very serious by Microsoft.
Norman advices all affected users to download the security updates as soon as possible, to be protected from potential exploits.