X

Critical flaws patched in Internet Explorer

Critical flaws patched in Internet Explorer

lgvamosir.jpg
lgvamosir.jpg
Robert Vamosi Former Editor
As CNET's former resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security.
Robert Vamosi
Today Microsoft published its December list of security bulletins. There are two, one of which is ranked Critical by Microsoft; the other is labeled Important. The most critical flaw announced today affects versions of Microsoft Internet Explorer found on most Windows machines, versions Windows 98 through XP. The Important flaw affects the Windows kernel. Patches are available via Microsoft Update. For context on what these security bulletins mean, see News.com for more details.

MS05-054: Critical
Entitled "Cumulative Security Update for Internet Explorer," this bulletin affects all versions of Windows XP SP1 and all versions of Internet Explorer 5.01 through 6.x. It supercedes MS05-052, released in October 2005. The flaw can lead to file tampering on unprotected machines.

MS05-055: Important
Entitled "Vulnerability in Windows Kernel Could Allow Elevation of Privilege," this bulletin affects all versions of Windows. Under certain circumstances, this flaw could allow a remote attacker to take control of your PC.