Everyone wait in line, for Microsoft is patching for the latest and greatest exploit of the year.  Everyone has been making a big stink about this microsoft IE hole that has been found, but if you use IE, you are a gambling man anyways.  Of course, everyone should go and get this patch as they claim over 2 million computers have been infected and more to come.  I am patched up, are you?

See bulliten below for more information/download locations:

Today, Internet Explorer has released an out-of-band Security Update to address the IE exploit outlined in the security advisory 961951. The update is now live to the world via Windows Update, Microsoft  Update, and the Download Center.

The vulnerability is in the way that Internet Explorer handles data binding content in HTML.  The case was opened on Tuesday, December 9th.  MSRC published an Advisory for the vulnerability on Wednesday, December 10.  As the level of exploitation continued to increase, the decision was made to work toward an out-of-band release to address the vulnerability which is available today.

Please use the below links to  download and install this update:

Microsoft Security Bulletin MS08-078 – CRITICAL

Security Update for Internet Explorer (960714)

Current details from the security advisory:

Microsoft Security Advisory (961051)

Vulnerability in Internet Explorer Could Allow Remote Code Execution

Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS08-078 to address this issue. For more information about this issue, including download links for an available security update, please review MS08-078. The vulnerability addressed is the Pointer Reference Memory Corruption Vulnerability – CVE-2008-4844.

Resources:

Disclaimer:

The information provided in this advisory is provided “as is” without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Revisions: