Comments on: December 2008 IE Vulnerability http://securityblog.verizonbusiness.com/2008/12/17/december-2008-ie-vulnerability/ Risk Intelligence from Verizon Business Security Solutions powered by Cybertrust Fri, 30 Oct 2009 23:27:39 +0000 http://wordpress.org/?v= hourly 1 By: Jeff Martin http://securityblog.verizonbusiness.com/2008/12/17/december-2008-ie-vulnerability/comment-page-1/#comment-105 Jeff Martin Thu, 18 Dec 2008 18:29:31 +0000 http://securityblog.verizonbusiness.com/?p=159#comment-105 I wonder why Microsoft has started doing these off-cycle patches. Agree that this one doesn't seem worth the disruption. I remember they were pretty firm about sticking to the once-a-month cycle, stating that widespread exploitation only took place after the bulletin was released. I guess it could be a coincidence that two patches they thought were specially urgent came out so close together. I wonder why Microsoft has started doing these off-cycle patches. Agree that this one doesn’t seem worth the disruption. I remember they were pretty firm about sticking to the once-a-month cycle, stating that widespread exploitation only took place after the bulletin was released. I guess it could be a coincidence that two patches they thought were specially urgent came out so close together.

]]> By: Russ Cooper http://securityblog.verizonbusiness.com/2008/12/17/december-2008-ie-vulnerability/comment-page-1/#comment-103 Russ Cooper Wed, 17 Dec 2008 18:56:16 +0000 http://securityblog.verizonbusiness.com/?p=159#comment-103 With the <a href="http://www.microsoft.com/technet/security/Bulletin/MS08-078.mspx" rel="nofollow">bulletin</a> now published we know that this patch does not replace MS08-073, the Internet Explorer cumulative update from December 9, 2008. This doesn't alter our opinions. You should, however, make sure you apply these patches in order just to be safe until Microsoft releases the next IE cumulative update. With the bulletin now published we know that this patch does not replace MS08-073, the Internet Explorer cumulative update from December 9, 2008. This doesn’t alter our opinions.

You should, however, make sure you apply these patches in order just to be safe until Microsoft releases the next IE cumulative update.

]]>