The
Internet Explorer Cumulative Security Update for October 2007 is now available via
Windows Update. Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update. I encourage you to upgrade to
Microsoft Update if you haven’t already to ensure that you receive the latest updates for all Microsoft products.
This update addresses 1 remote code execution and 3 spoofing vulnerabilities. This bulletin also includes killbits for some vulnerable ActiveX controls. For detailed information on the contents of this update, please see the following documentation:
This Update is rated “Critical” for IE 5.01, IE6 Server Pack 1 on Windows 2000, IE6 on Windows XP, IE7 on Windows XPSP2 and IE7 in Windows Vista; “Moderate” for IE6 on Windows Server 2003 and IE7 on Windows Server 2003.
Read full story...

More...