Microsoft rushes Explorer 8 patch releaseMay 15, 2013 – 5:21 AM
Just 11 days after issuing an advisory, Microsoft has released a patch for a bug in Internet Explorer 8 that bedeviled the U.S. Department of Labor earlier this month.
Microsoft’s speedy release of this patch “is an outstanding example of Microsoft’s responsiveness to the security community and their users,” wrote Andrew Storms, director of security of operations for security software provider Tripwire, in an email statement.
This IE8 security bulletin (MS13-038) is one of 10 that Microsoft released Tuesday as part of its “Patch Tuesday” release of bug fixes and security bulletins that the company routinely issues on the second Tuesday of each month.
Microsoft marked MS13-038 as critical and the company, along with other security firms, are advising those still running IE8 to apply the fix immediately. Using an altered Labor Department Web page, attackers used this vulnerability in an attempt to install malicious code on any visitor’s machine running IE8. Microsoft issued a temporary fix for this vulnerability last week.