Microsoft Updates Flawed IE6 Patch

It turns out Microsoft's indefinite postponement of security bulletin MS06-042 only lasted a day. The Redmond company on Thursday released an updated version of the patch that corrects a security vulnerability in IE 6.0 SP1.

The original patch contained a deployment issue, and was later discovered to include another security vulnerability. Microsoft says it ran into a problem with its fix planned for Tuesday on Windows 2000, where IE6 SP1 is primarily used. The delay was unfortunate, said MSRC's Mike Reavey, but necessary. "We are now urging IE 6.0 SP1 customers to go ahead and deploy this revised update as soon as possible."