Microsoft patch can lock users out of websites


Microsoft patch can lock users out of websites

Microsoft has admitted that a security patch for Internet Explorer (IE) can lock users out of certain websites and Microsoft's own MSN e-mail service.

The issue affects the cumulative patch for IE versions 5.01, 5.5 and 6.0 released on 5 February and rated "critical" by Microsoft. The software maker has released a software fix to correct the bug, according to the revised MS03-004 security bulletin.

Users were unable to access certain websites requiring user authentication after installing the patch, Microsoft said. This issue in itself does not present a security vulnerability and the original patch fixes all the vulnerabilities it is meant to.

Only users having trouble authenticating to websites or accessing MSN e-mail need to install the fix, which is available on Microsoft's security website.

The cumulative patch announced in MS03-004 includes all previously released patches for Microsoft's internet browser.

It also included fixes for two recently discovered vulnerabilities involving IE's cross-domain security model, which keeps windows of different domains from sharing information.

These two flaws could enable a website operator to load and run malicious code on a user's system.

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy