Microsoft Issues XML Fix to IE PatchBy Matthew Hicks | Posted 2004-02-06 Email Print
Re-Thinking HR: What Every CIO Needs to Know About Tomorrow's Workforce
Microsoft Corp. this week released a follow-on update to its earlier patch for an Internet Explorer spoofing vulnerability. The patch of a patch applies to Web sites and applications that make use of XMLHTTP authentication.Microsoft Corp. this week released a follow-on update to its earlier patch for an Internet Explorer spoofing vulnerability.
The new update, released in a series of service packs on Thursday, fixes Microsoft Extensible Markup Language (MSXML) functionality so that it can work properly with the changes made in the IE security bulletin that Microsoft released on Monday. That IE update patched a hole that could let an attacker disguise a malicious URL as a legitimate one in the Web browser's address bar.
The new MSXML update specifically applies to Web sites and applications that make use of an XMLHTTP control for authentication in IE, said Mike Reavey, a Microsoft security program manager.
The update documentation said the MSXML updates support Windows 2000 Service Pack 2, Windows 2000 Service Pack 3, Windows 2000 Service Pack 4, Windows NT, Windows Server 2003 and Windows XP.