We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Windows XP patches due Wednesday to plug IE holes

Security company advises users to dump Internet Explorer

Microsoft will release three new patches for Windows XP on Wednesday which are expected to plug "extremely critical" vulnerabilites in Internet Explorer.

The vulnerabilities were discovered by Danish security research firm Secunia and Greyhats Security Group and affect Windows XP with or without Service Pack 2 installed.

Secunia says there is now a working exploit out for one of the vulnerabilities that will compromise Windows XP SP2 systems if users visit a web page. That particular exploit has been known to Microsoft for two months.

Another issue lets attackers display a bogus website while the address bar in Internet Explorer shows the URL of a spoofed site, as well as activate the icon indicating that the site is secured with SSL. This exploit could be used by phishers wanting to steal customers' passwords, Secunia says.

The vulnerabilities are severe enough for Secunia to advise that users dump Internet Explorer completely and use a different browser.

Nathan Mercer, technology specialist at Microsoft New Zealand, confirmed that three patches will be released Wednesday morning, New Zealand time. However, Mercer was unable to say whether the patches cover the Internet Explorer-related issues reported by Secunia. The patches will be available via Windows Update and are part of the standard set of patches released on the second Tuesday every month by Microsoft, according to Mercer.

Mercer says the patches are not a special release, and are for Windows XP and thus not IE-specific ones. He was unable to say whether patches for previous Windows releases will be available on Wednesday as well.

IDG UK Sites

How to get a free EE Power Bar: Mobile and broadband customers eligible for free smartphone charger

IDG UK Sites

Why Netflix won't terminate your account for using a VPN, probably

IDG UK Sites

Forever 21 denies pirating Adobe, Autodesk and Corel software, accuses companies of 'bullying'

IDG UK Sites

New Apple TV 2015 release date rumours: Apple's WWDC invite shows Apple TV