Microsoft patched the vulnerability in IE

As expected yesterday (December 13), Microsoft released a December security bulletin to patch four dangerous vulnerabilities in Internet Explorer (IE) and Windows 2000 browsers.

A total of 2 security bulletins are issued: MS050-054 and MS05-055. The first security bulletin patched four separate vulnerabilities in the Internet Explorer browser, two of which were classified as "dangerous" by Microsoft.

These two vulnerabilities relate to how IE handles COM objects. An attacker can exploit this error to control the remote computer and perform dangerous tasks on the system.

All current versions of IE (IE 5.0, 5.5, and 6.0) are affected by the vulnerability. Even the version of IE .60 in the operating system considered as secure as Windows XP SP2 is affected.

The security bulletin MS05-055 corrects an error in the process of calling the procedure asynchronously in the Windows 2000 operating system kernel. Older operating systems like Windows NT 4.0 - are no longer supported by Microsoft.

Microsoft recommends that users should quickly update the fix via the Automatic Update mode of Windows or the Microsoft Update service.