Vole holds fire on core flaw

Security boffins have discovered an "extremely critical" vulnerability has been discovered in Microsoft's XML Core Services.

Secunia says the flaw, which only hurts those who use Internet Exploder, is caused by an error in the XMLHTTP 4.0 ActiveX Control.

ISS X-Force says the flaw could lead to loss of confidential information, disruption of business, or further compromise.

According tonews.com, the Vole has admitted that the bug is being exploited by hackers, but it does not seem to be rushing to fix the flaw before its normal run of bug releases on November 14.

A spokesVole said that Microsoft will determine, based on "customer needs" whether to release a patch during the company's monthly release process or an out-of-cycle security update.

In other words, if enough Volish punters find their machines compromised, Microsoft will release a patch. If not, world plus dog will have to wait until November 14. µ

L'INQ
News.com