Microsoft patches three 'critical' flaws

[Bush_Eats_Beef]

REDMOND, Wash. - Microsoft Corp. released three critical patches Tuesday for its Windows operating system, including one to fix an Internet Explorer browser flaw that had already been exploited in some Internet attacks.

The critical patches — deemed by Microsoft to address the highest threats — fix flaws that could allow an attacker to take control of another person's computer without permission.

The Redmond software maker also released two patches to fix less-severe flaws in its products. (MSNBC.com is a Microsoft - NBC joint venture.)

Microsoft said March 23 that it was aware that a flaw in its Internet Explorer had been made public, prompting some limited attacks. The company said at the time it expected to release a patch on Tuesday, the normal day for its monthly security fixes.

http://www.msnbc.msn.com/id/12271520/

[NYC]

1. Question.

My computer has Internet Explorer, but I use Mozilla. Should I log on using Internet Explorer long enough to download the patches? Or am I just risking things by doing that?

[LevelB]

2. Here is what I do

I set my home page in IE to google.

When I need to update, I start IE, then use the update feature. IE never gets a chance to visit an unsafe website.

If you are really concerned, I believe it is possible to update using Firefox, but I do not know how to do that. Perhaps someone else could help.

B

[NYC]

3. That sounds good enough.

Some night when I'm feeling adventurous, I'll take Internet Explorer to Google, then the patch page. Then, I'll put it back to sleep. I only keep it in case there is something wrong that I can't use Mozilla.

I've been using Mozilla for a few years now, and have never had a problem. (I also use Zone Alarm firewall & AVG anti-virus.)

[Bush_Eats_Beef]

5. I use I.E. "front ends" like NetCaptor...

...and while many of them "claim" to not have the same vulnerabilities as I.E., who knows for sure...

I use Firefox primarily but there are times when I need I.E. as the result of a site's content. Then I'll use Maxthon or NetCaptor (both I.E. "front ends" (there may be some "Avant Browser" fans out there...another "front end"...but I've never cared for it and its ad blocking is particularly unreliable).

If you have Windows XP, you don't need to get the updates with a browser. Simply set your preferences to allow automatic updates and they are fed to you as they're available.

I got impatient after reading the story and downloaded them manually. If I hadn't, I probably would have woke up tomorrow and found a message telling me that my computer had been updated.

:patriot:

[NYC]

6. Thanks. I have XP, but I guess Internet Explorer

can't get the updates until I open it. I think I put it to sleep. I use Zone Alarm so that it can't sneak out without permission. It hasn't requested permission, so I must have done something to keep it at bay.

I'll wake it up, and see if it asks for permission to get updates. If so, I'll say yes, and maybe it won't even need to be used as a browser for that.

[Deja Q]

4. Microsoft is a flaw.

[EFerrari]

7. Before I go nuts, are these patches only related to IE?

TIA.

:)

[Bush_Eats_Beef]

8. No...one patch is for IE, the others are Windows-related.

So if you have Windows and use Firefox, you've still got a problem. That's why I didn't wait for the "automatic updates."

:patriot:

[EFerrari]

9. Thank you!

:)