Microsoft to patch IE zero-day with emergency fix Tuesday
Microsoft today announced it will issue an emergency security update for Internet Explorer (IE) tomorrow to patch a zero-day vulnerability that has been used to launch drive-by attacks for at least several weeks.
Tuesday's update will be the second out-of-band update -- Microsoft's term for one outside its normal once-each-month Patch Tuesday -- in the last three months. Microsoft last shipped a rush IE update to customers in late January, to fix eight flaws, including one that had been used to attack several companies' networks, including Google's and Adobe's.
"The bulletin is being released to address attacks against customers of Internet Explorer 6 and Internet Explorer 7," said Microsoft in an updated advisory.