out of Band Patch for IE
Highly critical vulnerabilities in all versions of IE and could result in remote system access. Patches are availble, is Altiris going to send this out or do we have to deploy this ourselves?
http://secunia.com/advisories/35962/
DESCRIPTION:
Three vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system.
1) An error when accessing deleted objects in memory can be exploited to corrupt memory via a specially crafted web page.
2) An error when handling table operations in specific situations can be exploited to corrupt memory via a specially crafted web page.
3) Another error when accessing deleted objects in memory can be exploited to corrupt memory via a specially crafted web page.
Successful exploitation of the vulnerabilities may allow execution of arbitrary code.
Comments
CAB files are ready
The new PMImport CAB files are ready to go but apparently there are some issues getting the files posted.
------------------------------------
Principal SQA Engineer
Symantec
Generally the updates are available within 24 hours
The patch was released out of cycle, which I'm sure caused a scramble for everyone (including Microsoft). Always be sure to subscribe to the pmimports release article, and you'll find out just when the patches are released by Altiris.
Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.
Expect the files soon
CAB files are in final validation testing and should be posted soon.
------------------------------------
Principal SQA Engineer
Symantec
I got the KB notification and
I got the KB notification and have started PMImport. Oddly, I didn't get the notification from the Service Center (don't those still get sent out immediately after PMImport is released??)
Thanks Andrew.
Thanks,
Kyle
Symantec Trusted Advisor
For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
No Service Center Notification Either
My understanding was we were still supposed to get the notifications from the service center. However, I didn't get one earlier this month with the release and did not get one for this release either. I checked the service center and my subscription is still active. While there, I figured I would subscribe to Patch Management 7 notifications as well since we are about halfway done with our migration to 7 and patching on both systems. Unfortunately, Patch Management 7 has not made it into the subscriptions list yet :-(
RS
I had issues with the notifications
even before I started working for a partner (as a customer, in case that needed clarification). I would get nothing, and then get a flood of emails. I've never had a problem with subscribing to KB's, so I've stuck with that.
Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.
Would you like to reply?
Login or Register to post your comment.