IE9 Updated

Among the patches released as part of the June 2011 “Patch Tuesday” was an update for Internet Explorer (IE), including the latest version, IE9, which included fixes for critical security and other bugs. The patch can cause confusion because of how it updates the IE9 version information that displays in the IE9 About dialog box, and administrators rolling out IE9 as part of a Windows 7 deployment will want to ensure this patch is installed.

Critical IE9 Security Fixes

Microsoft rated the June 2011 update for IE9 as Critical as it resolves security vulnerabilities that could allow remote execution if a user visits a specially crafted, malicious Web page.

For IE9, the security update addresses the security vulnerabilities by fixing IE so that memory is not corrupted when IE attempts to access an object that has not been initialized or has been deleted. The memory corruption could allow an attacker to execute arbitrary code.

Users who have enabled automatic updates from Windows Update, or whose organization uses the Windows Server Update Services (WSUS), should get this update automatically. Administrators including IE9 as part of an automated deployment of Windows 7 will want to ensure the update is included or available through WSUS.