Microsoft to patch Windows flaws
101397
Microsoft plans to release patches for five Windows flaws next week, the software giant announced Thursday. The company posted the information on its TechNet site as part of a new program that gives the general
513312
Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.The updates were pre-announced Thursday morning on Microsoft&#39;s Web site in order to give IT staffers a sense of how busy they will be next week installing the patches.One of the updates is considered critical for Windows Vista and XP users because the flaw it fixes could be used by attackers to install unauthorized software on a victim&#39;s computer. This update is rated important for Windows Server 2003 users and considered moderate for Windows 2000 users.The second update, rated important for all Windows users, could allow an attacker to run software with a higher level of privilege on a system than would normally be allowed.Microsoft did not provide any technical details on the updates.With just two updates scheduled, January will be a light month by Microsoft&#39;s standards. In 2007 the company shipped 69 software updates, an average of just under six per month.
640711
Microsoft Corp.  on  Tuesday released three security patches to fix holes in its  Windows and Office software and warned one of the  vulnerabilities was "critical" because it could allow an  attacker to take over a user's computer.
203799
Microsoft Corp. today released a dozen software patches to cover 16 security flaws -- half of which it deemed "critical" -- in all versions of the Windows operating system and a broad range of popular Microsoft applications such as its Internet chat and media player products.
744672
Windows security holes patched; tool to rid PCs of malicious software now available.
691908
(InfoWorld) - Microsoft has released its security patches for September, fixing known vulnerabilities in its MSN Messenger software and Unix services for Windows as well as a critical bug in Windows 2000. In total, Microsoft patched four bugs in its products. This was one less update than expected following the software maker's last-minute decision to scrap a fix for its SharePoint collaboration software. The Windows 2000 update is the only one Microsoft rates as critical. It affects the Microsoft Agent software that Web developers use to create interactive characters on Web pages. By tricking a Windows 2000 user into visiting a maliciously encoded Web page, an attacker could exploit this flaw to run unauthorized software on a victim's computer. This is not the first time Microsoft has been forced to patch a critical bug in Microsoft Agent. In April, the company fixed a similar flaw that also affected Windows XP users. Because the MSN Messenger and Windows Services for Unix flaws were both publicly disclosed last month, they should also be given priority said Amol Sarwate, manager of Qualys's vulnerability research lab. "They had both been known for awhile, but they are important," he said. "Especially the MSN vulnerability." MSN Messenger and Windows Live Messenger users will be prompted to upgrade their software when they connect with Microsoft's instant-messaging services, Microsoft said in its notes on the security update. "If you do not upgrade to a non-affected version of the MSN Messenger or Windows Live Messenger client, depending on your platform, you will be notified to upgrade on each attempt to sign on." MSN Messenger 7.0.0820 or Windows Live Messenger 8.1 are not vulnerable to the flaw, Microsoft said. The fourth patch issued Tuesday fixes a bug in Crystal Reports for Visual Studio. Attackers could run code on a victim's PC by getting them to open a specially crafted Crystal Reports RPT file, Microsoft said. Overall, the September updates are a far less serious group of patches than the nine updates Microsoft released last month. "Compared to last month, Patch Tuesday in September is almost anticlimactic," security vendor McAfee said in a statement. "Customers who have legacy applications installed on Windows Server 2000 Service Pack 4 should be paying the most attention, but we don't foresee a lot of exploitation of the Windows 2000 vulnerability. Not many people will use those systems to surf the Web, which would be the attack vector."
311958
Microsoft has released a patch for what it is calling a &quot;critical&quot; security flaw in the way many of its programs handle JPEG graphics files.
549045
In sharp contrast to last month&#39;s barrage of critical patches, Microsoft has offered up just one &quot;important&quot; fix for users to implement in its scheduled round of security updates for November.
586376
Microsoft Corp.  on Tuesday  released a security patch to fix a "critical" hole in its  Internet Explorer Web browser that the world's biggest software  maker said could allow an attacker to take control of a user's  computer.
185066
Microsoft on Tuesday issued 10 security advisories â-even of them critical â -ing consumers and businesses to patch 21 new flaws in Windows software products.
734469
(InfoWorld) - With hackers exploiting unpatched vulnerabilities in its Windows and Office software, Microsoft plans to issue 11 security updates next Tuesday. Some of the Office and Windows updates will be for critical flaws that could be exploited by attackers with no action on the part of users. Six of the patches will be for Windows, and four of them will be for Office, MicrosoftÂ said Thursday in a note on its Web site. The 11th update will be for a flaw in Microsoft's .Net framework, which is considered less severe than the critical Windows and Office patches. Hackers have been keeping Microsoft's Security Response Center busy this past month. Microsoft generally issues its security patches on the second Tuesday of every month, but last weekÂ the company was forced to issue a rare, "out-of-cycle" security patchÂ after criminals began exploiting a flaw in Internet Explorer's VML (Vector Markup Language) rendering engine. And security experts have also warned of cyberattacks based on unpatched flaws in PowerPoint, Word 2000 and in an ActiveX control (called WebViewFolderIcon) used by the Windows' graphical user interface software. The WebViewFolderIcon flaw will be patched Tuesday, Microsoft said. Attacks that take advantage of this flaw have been seen on the Internet, the SANS Internet Storm CenterÂ warned earlier this week. Â
284458
Microsoft (Nasdaq: MSFT) has released a patch for a potentially serious configuration flaw in the firewall that ships with the company's Windows XP Service Pack 2.
715528
Microsoft on Tuesday issued 10 security advisories - seven of them critical - urging consumers and businesses to patch 21 new flaws in Windows software products.
616542
(InfoWorld) - Microsoft will release six sets of security patches next Tuesday, four of which will fix critical flaws in the Windows operating system. The software will be released as part of Microsoft's regular monthly security release, known informally as "Patch Tuesday." Microsoft is also planning less critical updates for Visio and Windows Vista, the company said in a note, published Thursday. Microsoft considers an update critical when the flaw could be used by an attacker to remotely run unauthorized software on the victim's machine, theoretically leading to the propagation of an Internet worm. This month, Microsoft has revealed a few more details on the upcoming patches than it has in the past. That's part ofÂ a new plan to help IT administratorsÂ better prepare for Patch Tuesday by letting them know exactly what versions of Microsoft's products will be affected by the updates. Last month, Microsoft released seven groups of patches on Patch Tuesday.
507974
Microsoft Corp. released four critical patches Tuesday to plug security holes in several versions of its Windows operating system, Internet Explorer Web browser and other programs.
372618
Microsoft plans to release a dozen security updates next week to patch critical vulnerabilities in Windows, Office, Visual Studio and in its anti-virus software.
280329
InfoWorld - Microsoft has released its monthly set of security patches , fixing problems in Windows, Internet Explorer and in the SSL (Secure Sockets Layer) software used for secure Web browsing.