IE 9.0.4 Available via Windows Update

The December 2011 Cumulative Security Update for Internet Explorer is now available via Windows Update. This security update resolves three privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user visits a specially crafted Web page using Internet Explorer. An attacker who successfully exploited this vulnerability could run a malicious application on the affected system. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

This security update is rated Important for Internet Explorer on Windows clients and Internet Explorer 9 for Windows 2008 R2; and Low for Internet Explorer on Windows servers. For more information, see the full bulletin.

Most customers have enabled automatic updating and do not need to take any action. We recommend that customers, who have not enabled automatic updating, enable it (Start Menu, type “Windows Update”). We recommend that administrators, enterprise installations, and end users who want to install this security update manually, apply the update immediately using update management software or by checking for updates using the Microsoft Update service.

—Ceri Gallacher, Program Manager, Internet Explorer

Comments

• Anonymous
  December 13, 2011
  "Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights" - Why is default user in Windows 7 still administrator? Is it so hard for you use the same approach like Mac OS X or Linux? Windows should durring installation require from user to create admin password and deafult user should be "Standard", not "Administrator"

• Anonymous
  December 13, 2011
  Yes, Windows 7 creates Administrators accounts, but with UAC on, which effectively makes them equal to limited Users accounts. Too bad many people misunderstand UAC and turn it off. And, by the way, this is the same approach MacOS or Linux take (UAC is basically the graphical counterpart to Linux sudo command).

• Anonymous
  December 13, 2011
  Dear IEBlog: Approximately when can we get a version of IE10 that runs on Windows 7? Will there be more Win8-only platform previews first?

• Anonymous
  December 13, 2011
  @Arieta 8-12 weeks after the latest preview runs into the Windows 8 beta release. I expect the new IE preview/beta by then. I could be wrong thought, but it makes an awful lot of sense.

• Anonymous
  December 13, 2011
  The comment has been removed

• Anonymous
  December 13, 2011
  The comment has been removed

• Anonymous
  December 13, 2011
  Cool, it seems the IE team has finally fixed the MIME filter issue in IE9, which I used in my previous ad blocker implemantation before moving to TPL-based filtering. support.microsoft.com/.../2628551

• Anonymous
  December 13, 2011
  why don't the comment system work. I had just written along post!?

• Anonymous
  December 13, 2011
  @Jake Black - The comment system on the IE Blog has major issues with losing comments on a regular basis.  This is a 5+ year well known bug that Microsoft has been incredibly negligent about fixing. (It is technically a Community Server bug, but they aren't lifting a finger to fix it either) I've just submitted (yet another) request to have it fixed, even supplying 2 sets of working code that could be dropped in as a fix in under 30 seconds. Sean Jenkin [MSFT] is the person in charge of the blogging platform at Microsoft and can be contacted here: blogs.msdn.com/.../contact.aspx regarding issues with the IE Blog. PS Since that form is also using the blogging software, save a copy of your comments (CTRL+C) before posting them in case they too get sent to dev/null.

• Anonymous
  December 14, 2011
  @ Pete Microsoft has answered all questions. e.g here: blogs.msdn.com/.../html5-and-web-video-questions-for-the-industry-from-the-community.aspx and here: blogs.msdn.com/.../html5-video-update-webm-for-ie9.aspx Now others have to answer questions like those asked in the first quotation. As long as these questions are not answered, the ball is not in Microsoft’s part of the field. Harry

• Anonymous
  December 14, 2011
  The comment has been removed

• Anonymous
  December 14, 2011
  @Steve okay, cool - But my post was just a list of thing I would to see improved with regards to IE download manager.

• Anonymous
  December 14, 2011
  >make something. >name it as "WebBlahBlah" (hint: WebM, WebGL...) >tag it as "free", "open" >get tons of zealots demanding support or blood. ??? meh.

• Anonymous
  December 14, 2011
  The comment has been removed

• Anonymous
  December 14, 2011
  The comment has been removed

• Anonymous
  December 16, 2011
  @meni, stop trolling and GTOH! @6205, for your poor information: default user it's not administrator, it belongs to Administrator group but less privileged than the actual administrator. If Apple is something even comparable to Microsoft, they wouldn't use Windows Azure for their pathetic iCloud! And hey, do they have anything to match with TFS, MOSS, XNA, Xbox, Knect or list of products? Meh! PS: M 4 Microsoft, Metallica & nothing else matters!

• Anonymous
  December 17, 2011
  What happened??? I was hapy IE9 user since the beta, but after this update IE9 crashed my laptop 2 times... Downloaded FIREFOX WITH BING - everything works fine...

• Anonymous
  December 17, 2011
  What happened??? I was hapy IE9 user since the beta, but after this update IE9 crashed my laptop 2 times... Downloaded FIREFOX WITH BING - everything works fine...