Vendor fixes flaws in its Internet Information Services and Windows Media Services software.Microsoft on Wednesday released a batch of patches that fix security holes in several versions of its Internet Information Services software. IIS versions 4, 5, and 5.1 are vulnerable to what is known in security circles as a cross-site scripting attack, according to Microsoft. It's a sophisticated attack that requires the attacker to lure a Web surfer to visit a specially designed Web site and open a link. The request to open the link is sent to another IIS server, and that server can send a script that would run on the user's machine and make it vulnerable.
|