Microsoft Patches Fix IE, Sony Flaws

An anonymous reader writes "Microsoft issued two security updates today, one of which fixes at least four flaws in its Internet Explorer browser, including one for which an exploit was released over Thanksgiving that is now being used by a handful of porn sites to install spyware, etc. According to Washingtonpost.com, the IE patch also removes a component left behind by a patch from Sony BMG designed to remove some of the more dangerous features of anti-piracy software installed by Sony BMG music CDs. Researchers found that the Sony patch changed settings in IE so that any Web site could install software on those machines."

Comments

The Good, The Bad, and The Stupid

[Anonymous Coward]

If Microsoft released a patch right away, administrators would complain they are patching too often and forcing them to test internal software more.

If Microsoft waits for the patch cycle, slashdotters complain Microsoft is purposely holding out so that they can sell anti-virus

And normal computer users, they don't patch so it really does matter

Re:This is bizarre

[Eberlin]

HD-DVD vs. Blu-Ray, Xbox 360 vs. PS3, and then there's Microsoft's move into the music business. Must say there's not many things more satisfying than pointing out (and fixing) the wrongdoings of the "competition" -- ain't that right, fellow slashbots?