Patch Management Solution

Many government agenies has been hacked by being exploited with Remote Code Execution. I have downloaded the April 2013 MS13-028 which is the latest cumulative security updates for IE and also patched it to all my company windows servers.

However, Microsoft has released another fix called Microsoft Security Advisory (2847140). I ran PMImport twice, but come back empty. Please see attached url:

http://blogs.technet.com/b/msrc/archive/2013/05/08/fix-it-for-security-advisory-2847140-is-available.aspx?Redirected=true

Please help.

Thank you very much,

Charlie.

Based on the link you posted there is no patch available for this yet:

The Fix it is an effort to help protect as many customers as possible, as quickly as possible. We continue to work on a security update to address this issue and we’re closely monitoring the threat landscape.

You can download the FixIt utility that MS has provided and run that via a Managed Software Delivery policy against all of your XP w/IE8 computer to mitigate the flaw until the patch is actually released.

Hi Charlie,

I would like to let you know that Microsoft Security Advisory (2847140) has been added to Patch Data 7.1.422 as part of bulletin MS13-A02 with name MicrosoftFixit50992.msi

Thanks,
Roman

FYI:

MS13-038 has been released to address this issue as well.

http://support.microsoft.com/kb/2847140

Thank you all so very much,

I really appreciate that.

Charlie.