Microsoft patches ten IE security holes

Microsoft today issued a cumulative security update for the Internet Explorer browser, which covers a total of eight remote code execution vulnerabilities as well as one information disclosure vulnerability and one spoofing vulnerability.

Affected browsers include all versions from 5.01 to IE 6.x for XP SP2 as well as IE 6 for Server 2003 with installed SP1. Microsoft did not release patches IE7 Beta 1 users, but promised to make an update available "on Windows Update within the next two weeks."

The company said the severity of the issues are "critical" and recommends users to update their browser "immediately."