IE 9.0.4 Available via Windows Update


The December 2011 Cumulative Security Update for Internet Explorer is now available via Windows Update. This security update resolves three privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user visits a specially crafted Web page using Internet Explorer. An attacker who successfully exploited this vulnerability could run a malicious application on the affected system. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights.

This security update is rated Important for Internet Explorer on Windows clients and Internet Explorer 9 for Windows 2008 R2; and Low for Internet Explorer on Windows servers. For more information, see the full bulletin.

Most customers have enabled automatic updating and do not need to take any action. We recommend that customers, who have not enabled automatic updating, enable it (Start Menu, type “Windows Update”). We recommend that administrators, enterprise installations, and end users who want to install this security update manually, apply the update immediately using update management software or by checking for updates using the Microsoft Update service.

—Ceri Gallacher, Program Manager, Internet Explorer

Comments (18)

  1. 6205 says:

    "Users whose accounts are configured to have fewer user rights on the system could be less affected than users who operate with administrative user rights" – Why is default user in Windows 7 still administrator? Is it so hard for you use the same approach like Mac OS X or Linux? Windows should durring installation require from user to create admin password and deafult user should be "Standard", not "Administrator"

  2. Lorenzo says:

    Yes, Windows 7 creates Administrators accounts, but with UAC on, which effectively makes them equal to limited Users accounts.

    Too bad many people misunderstand UAC and turn it off.

    And, by the way, this is the same approach MacOS or Linux take (UAC is basically the graphical counterpart to Linux sudo command).

  3. Arieta says:

    Dear IEBlog: Approximately when can we get a version of IE10 that runs on Windows 7? Will there be more Win8-only platform previews first?

  4. alvatrus says:

    @Arieta

    8-12 weeks after the latest preview runs into the Windows 8 beta release. I expect the new IE preview/beta by then.

    I could be wrong thought, but it makes an awful lot of sense.

  5. Pete says:

    Posting a new post when you haven't answered the questions asked of you in the past post is considered rude.

    blogs.msdn.com/…/media-capture-api-helping-web-developers-directly-import-image-video-and-sound-data-into-web-apps.aspx

    @Microsoft – please address the questions in the last post regarding your media API and FULL SUPPORT for an open Video format (e.g. NOT h.264!)

    It shouldn't take more than 5 days to address the developer community that is waiting and expecting you to indicate that you are fully committed to supporting the Open Web and that you have no intentions of going further down the rabbit hole you opened up when IE9 beta/RTM was release without proper HTML5 video support.

    If there were ever a time for course correction in the IE10 browser development phase – THIS IS IT!

    I'll help simplify the process for you – just answer this question with a comment or post on this blog ASAP.

    ====================================================================================================================================

    Q.) Is Microsoft is fully committed to natively supporting an open video format for HTML5 Video playback AND the Media Capture APIs?

      [__] Yes

      [__] No, Microsoft intends to further ruin the future of the Web by only supporting h.264 – an invalid option for HTML5 video

    ====================================================================================================================================

    PS your comment form is ***still*** broken!

  6. IE says:

    IE 10 need to have a metro design.

  7. Viktor Krammer [quero.at] says:

    Cool, it seems the IE team has finally fixed the MIME filter issue in IE9, which I used in my previous ad blocker implemantation before moving to TPL-based filtering. support.microsoft.com/…/2628551

  8. Jake Black says:

    why don't the comment system work. I had just written along post!?

  9. Steve says:

    @Jake Black – The comment system on the IE Blog has major issues with losing comments on a regular basis.  This is a 5+ year well known bug that Microsoft has been incredibly negligent about fixing. (It is technically a Community Server bug, but they aren't lifting a finger to fix it either)

    I've just submitted (yet another) request to have it fixed, even supplying 2 sets of working code that could be dropped in as a fix in under 30 seconds.

    Sean Jenkin [MSFT] is the person in charge of the blogging platform at Microsoft and can be contacted here: blogs.msdn.com/…/contact.aspx regarding issues with the IE Blog.

    PS Since that form is also using the blogging software, save a copy of your comments (CTRL+C) before posting them in case they too get sent to dev/null.

  10. Harry Richter says:

    @ Pete

    Microsoft has answered all questions.

    e.g here:

    blogs.msdn.com/…/html5-and-web-video-questions-for-the-industry-from-the-community.aspx

    and here:

    blogs.msdn.com/…/html5-video-update-webm-for-ie9.aspx

    Now others have to answer questions like those asked in the first quotation. As long as these questions are not answered, the ball is not in Microsoft’s part of the field.

    Harry

  11. Joel says:

    @Harry – those links are a good read, but they try very carefully to step around the 800lb elephant in the room.

    MSFT currently supports h.264 because it is a good (all around) format and because IE runs on Windows (a platform where they have already sunk tons of money into licensing the format)

    MSFT also supports WebM (though not natively out of the box) because they wanted a leg to stand on when they were accused of not playing fair.  Its a weak effort, but enough to keep developers from grabbing their pitchforks right away.

    However the game has changed.  HTML5 is now.  IE is the only browser NOT supporting an Open Format**

    **Yes we understand WebM isn't perfect, but its a heck of a lot more open and un-encumbered than h.264 is.

    MSFT lost in the smartphone/tablet race, where mobile video is becoming much more important.  MSFT can't use their desktop dominance to apply monopolistic policy on the rest of the World to force them to use h.264 on the Open Web when it is clearly not the acceptable choice.

    However all of this is MOOT.

    The question posed above by @Pete was "is Microsoft dedicated to supporting **an** open format for video" – the specifics were not mentioned, other than (and likely just for clarification) that h.264 is NOT open, those NOT a valid answer in terms of which video format(s) should be supported natively.

    Thus the question is still very valid, especially since Microsoft has not declared ANYTHING about the format(s) it plans to support for the media capture API.

    So I concur with Pete:

    ====================================================================================================================================

    Q.) Is Microsoft is fully committed to natively supporting an open video format for HTML5 Video playback AND the Media Capture APIs?

     [__] Yes

     [__] No, Microsoft intends to further ruin the future of the Web by only supporting h.264 – an invalid option for HTML5 video

    ====================================================================================================================================

  12. Jake Black says:

    @Steve okay, cool – But my post was just a list of thing I would to see improved with regards to IE download manager.

  13. meh says:

    >make something.

    >name it as "WebBlahBlah" (hint: WebM, WebGL…)

    >tag it as "free", "open"

    >get tons of zealots demanding support or blood.

    ???

    meh.

  14. Anon says:

    @Joel,

    Sadly you got sucked into Google propaganda about the 'evils of h264' and how their WebM is better than life itself.

    Please read my comments on "Media Capture API" blog (the previous on here) on how WebM is noting more than the Internet's Joseph Stalin.

    @Ceri,

    Thanks for the heads up, updating!

  15. meni says:

    Meh,

    1) It annoys me to great heights that you use the name box to write something derogatory or confusing for the conversation.

    2) Is your criteria for naming WebGL and WebM "something" is whether or not Microsoft endorses them? You are living in the past. Microsoft no longer wields the power in the industry it used to. For me at least, it's not "Microsoft, please please implement Web* or it will die", it's rather "Hey Microsoft, you are getting irrelevant fast, please don't make the mistakes you made with SVG, Canvas, W3 event model, and FOR YOUR SAKE get with the times". And if you are a high-tech guy/girl you know that times include the words "open", "standards" and many a times "open-source".

  16. Brand Loyalty says:

    @meni, stop trolling and GTOH!

    @6205, for your poor information: default user it's not administrator, it belongs to Administrator group but less privileged than the actual administrator. If Apple is something even comparable to Microsoft, they wouldn't use Windows Azure for their pathetic iCloud! And hey, do they have anything to match with TFS, MOSS, XNA, Xbox, Knect or list of products?

    Meh!

    PS: M 4 Microsoft, Metallica & nothing else matters!

  17. Paulius says:

    What happened??? I was hapy IE9 user since the beta, but after this update IE9 crashed my laptop 2 times… Downloaded FIREFOX WITH BING – everything works fine…

  18. Paulius says:

    What happened??? I was hapy IE9 user since the beta, but after this update IE9 crashed my laptop 2 times… Downloaded FIREFOX WITH BING – everything works fine…