Microsoft Patch to Fix Security Flaws
408370
Microsoft Corp. announced Tuesday it has found a new security flaw with its Windows XP operating system and warned that an attacker could infiltrate other computers by persuading their owners to open a specialized graphics file.
586376
Microsoft Corp.  on Tuesday  released a security patch to fix a "critical" hole in its  Internet Explorer Web browser that the world's biggest software  maker said could allow an attacker to take control of a user's  computer.
96676
Microsoft on Wednesday released an update to Internet Explorer (IE) to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
549045
In sharp contrast to last month&#39;s barrage of critical patches, Microsoft has offered up just one &quot;important&quot; fix for users to implement in its scheduled round of security updates for November.
530951
Out-of-band Microsoft is considering plans to release an unscheduled security patch to address a serious security vulnerability in its ubiquitous Internet Explorer web browser.â¦
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
427995
Microsoft is offering a patch for a critical security flaw related to the processing of JPEG images by its operating systems and other applications.
507974
Microsoft Corp. released four critical patches Tuesday to plug security holes in several versions of its Windows operating system, Internet Explorer Web browser and other programs.
739239
(InfoWorld) - Microsoft Corp. has rolled out its monthly security updates for December, patching critical flaws in Internet Explorer, Windows Media Format, and the Visual Studio 2005 development software. The seven security patches address 11 bugs, including two in the Windows Media Player software. However, no fixes were provided for two Microsoft Word flaws that have been used in a small number of attacks during the past week. Microsoft had said it would release only six patches on Tuesday, but the company added the Windows Media Format update at the last minute, after reports of attacks based on this vulnerability began surfacing. The Windows Media Format is used by Microsoft's Windows Media Player software. In late November, security vendors warned that a buffer overflow error could occur when the Windows Media Player processed ".asx" (Advanced Stream Redirector) media files, meaning that users would first need to be tricked into opening a malicious media file for the attack to work. In its update Tuesday, Microsoft also patched a similar bug in the way the media player processes ".asf" (Advanced Systems Format) files. The Internet Explorer patch fixes four bugs. It is also rated critical, and is noteworthy because some of these bugs will probably begin to be exploited by hackers by week's end, said Gunter Ollmann, director of IBM Corp.'s Internet Security System's X-Force threat analysis service. Enterprise administrators should also pay close attention to an SNMP (Simple Network Monitoring Protocol) patch issued Tuesday, Ollmann said. Microsoft has rated this patch as "important," rather than critical because SNMP is normally blocked at the firewall and turned off by default on Windows systems. However, it is widely deployed as part of the network monitoring infrastructure in the enterprise, and is often used on critical servers, Ollmann said. Ollmann believes this SNMP patch is the "most important" update for enterprise customers. "Since the service is widely deployed in the enterprise and since it's commonly deployed on servers, we think this would be an important attack vector for enterprises," he said. The remaining updates include a "critical" fix for Visual Studio 2005, and "important" updates for Windows and Outlook Express, Microsoft said. Microsoft defines "critical" flaws as bugs that could allow the propagation of an Internet worm without any action on the part of the victim. The company's next set of security updates are due Jan. 9.
734229
Microsoft has released a "critical" patch to fix a security flaw affecting how Windows, Office and developer tools software programs process images in the JPEG image format.
576621
Microsoft Corp. put out three software patches Tuesday that fix problems carrying a "critical" rating, the company's highest threat level.
526721
Microsoft Corp. released four software patches Tuesday to fix security flaws, including one that could allow hackers to take over computers running the company's instant messaging programs.
541400
Microsoft today released a dozen security updates to fix a score of vulnerabilities in various products, including a "critical" patch for its own security software.
645767
Microsoft Corp. MSFT.O on   Tuesday released three security patches to fix holes in its   Windows and Office software and warned one of the   vulnerabilities was "critical" because it could allow an   attacker to take over a user's computer.
549959
Microsoft Corp. today released an unprecedented number of software security updates to plug flaws in its products, including seven &quot;critical&quot; defects that it said hackers could use to hijack
735918
Microsoft Corp. published six security fixes &#151; half of them rated "critical" &#151; in its regularly scheduled software update Tuesday.
159505
Microsoft Corp. has patched critical flaws in Internet Explorer, Windows Media Player and Visual Basic with its last "Patch Tuesday" release of 2006.