[ISN] Three 'critical' Windows fixes due on Patch Tuesday

[InfoSec News]

http://www.theregister.co.uk/2009/07/09/microsoft_july_patch_tuesday_advance/

By Dan Goodin in San Francisco
The Register
9th July 2009

Microsoft on Tuesday plans to release updates patching three critical 
Windows security vulnerabilities, two of which are already under attack.

One of the updates plugs a hole in an Internet Explorer component that 
handles online video. Hundreds of thousands and possibly millions of 
websites - mostly catering to Chinese-speaking visitors - have been 
hijacked so that they secretly point to servers that exploit the 
critical vulnerability, creating what Microsoft has called a 
"browse-and-get-owned" experience for the people unfortunate enough to 
visit them.

"Our engineering teams have been working around the clock to produce an 
update for the issue discussed in Security Advisory 972890 
(vulnerability in the Microsoft Video ActiveX Control) and we believe 
that they will be able to release an update of appropriate quality for 
broad distribution that protects against the attacks," Microsoft's Jerry 
Bryant writes here.

(Microsoft has already released a temporary fix for the bug. If you 
haven't installed it, you should do so now).

[...]