Microsoft Flubs Patch, Putting Users At Risk

An anonymous reader writes "Microsoft is rushing to fix a flaw introduced by the company's latest security update to Internet Explorer. From the article: 'The flaw, initially thought to only crash Internet Explorer, actually allows an attacker to run code on computers running Windows 2000 and Windows XP Service Pack 1 that have applied the August cumulative update to Internet Explorer 6 Service Pack 1, security firm eEye Digital Security asserted. The update, released on August 8, fixed eight security holes but also introduced a bug of its own, according to Marc Maiffret, chief hacking officer for the security firm, which notified Microsoft last week that the issue is exploitable.'"

Comments

Laughable

[neonprimetime]

The incident may undo a great deal of the work that Microsoft has done to convince users to trust its software updates and install them by default.

Who's trust did they gain again? Which users? Certainly wasn't me!

Re:Some systems affected here

[BradleyUffner]

Riiiiight... Because a Firefox patch has never introduced a new bug into the system that would be patched in the next update.

Re:Why This is Different

[Aqua_boy17]

I may just get info on new flaws here first! :-)

I think you've come to the right place.

Oh, wait. I thought you said newS flaws. Nevermind.

I will not criticize this

[gelfling]

As that would generate the usual screed of MS apologists modding down anyone here who dare mock the Holy Windows.