Cyber Risks · Cisco Talos

Microsoft Out of Band Patch - 28th July 2009

Summary: Microsoft released an out-of-band patch on 28 July 2009 addressing two issues, one of them in Internet Explorer, described in Security Advisory MS09-034 as programming errors that may allow a remote attacker to execute code on a vulnerable system. Detection rules for attacks targeting these vulnerabilities are included in the release, identified with GID 3 and SIDs 15731 through 15733, and Sourcefire 3D customers can get them in SEU 250.

What you should know: A remote code execution flaw in Internet Explorer was serious enough that Microsoft shipped a patch outside its normal schedule, and the detection coverage arrived as three signatures (SIDs 15731-15733) that defenders had to deploy to catch exploitation in progress.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Related