Vista and IE 7 to receive 'critical' fixes on Patch Tuesday
411146
Six high priority updates, in all Microsoft is to issue four critical security fixes for this month's Patch Tuesday. Three of these affect either Windows Vista or Internet Explorer 7, which the software maker holds out as a paragon of its conversion to secure computing. In all, Microsoft will push six high-priority updates this Tuesday, the company announced today.â¦
664507
(InfoWorld) - Microsoft will release five sets of security patches next Tuesday, including a critical update for users of Windows 2000,Â the company saidÂ Thursday. With the remaining four security updates rated as "important" by Microsoft, this latest round of patches appears to be less worrisome than the August updates. Last month,Â Microsoft released nine updates, six of which were rated critical. Microsoft rates its bug fixes as critical when attackers can exploit the flaws without requiring any user action. Also set to be patched this month are Visual Studio, Windows Services for Unix, SharePoint Services, and the Windows Live and MSN Messenger software. Microsoft releases its security patches on the second Tuesday of each month, generally around 11 a.m., Pacific time. With this latest rounds of patches, Microsoft will have released 55 updates in 2007, the same number it had released by September of last year.
660592
(InfoWorld) - After handling 19 sets of patches inÂ JulyÂ andÂ August, system administrators will catch a bit of a break next week when Microsoft Corp. is expected to release just three security updates for its Windows and Office products. On Thursday, Microsoft said that only one of these updates, for Office, is rated as critical. The updates will be released Tuesday in line with Microsoft's monthly patch release schedule. Microsoft'sÂ advance notification on the updatesÂ can be found at its Web site. The other two updates, which fix problems with Windows, are rated no higher than Important, meaning that user action would be required before an attack based on these flaws could succeed. As usual, Microsoft did not release any further details on the patches. That information will be divulged when the patches are made available Tuesday. But the company may be planning to patch aÂ recently reported flaw in its Word 2000 software. Earlier this week Symantec Corp. warned that the flaw was being exploited by attackers to run unauthorized software on a victim's computer. Â
555449
Microsoft this week released a patch to fix an important vulnerability in Internet Explorer, even as a new worm that took advantage of an as-yet-unpatched hole in the Web browser spread.
630318
Microsoft on Tuesday released a bevy of patches, including three critical patches for the Microsoft Windows operating system, two for Office, and a critical patch for its antivirus and anti-malware software products.
391512
Slew of Patch Tuesday security updates will include "critical" fixes for Windows, Office and Microsoft's security tools.
660319
By JESSICA MINTZ SEATTLE - Microsoft Corp. released four critical patches Tuesday to plug security holes in several versions of its Windows operating system, Internet Explorer Web browser and other programs.
411910
(InfoWorld) - Microsoft has released its monthly set of security patches , fixing problems in Windows, Internet Explorer and in the SSL (Secure Sockets Layer) software used for secure Web browsing. In total, Microsoft released six sets of patches, called updates, fixing 15 flaws in its products. Four of these updates are rated critical and administrators should patch them as soon as possible, security experts said Tuesday. Many of the flaws that Microsoft patched on Tuesday can be exploited via the Web. In particular the MS07-033 update, which fixes bugs in Internet Explorer and MS07-031 , which addresses a critical flaw in the SSL libraries used by Windows. The SSL flaw is particularly interesting because it affects users who are visiting supposedly trustworthy Web sites, and because it could also affect non-Microsoft browsers like Firefox and Opera, said Amol Sarwate, manager of Qualys, Inc.'s vulnerability research lab. "It will affect all the browsers that call the libraries that are in the Windows operating system," he said. Although Microsoft warned that this flaw could be used by attackers to run unauthorized software on the victim's computer, this would be hard to do. "Attempts to exploit this vulnerability would most likely result in the Internet Web browser or application exiting," Microsoft wrote in its MS07-031 bulletin. "The system would not be able to connect to Web sites or resources using SSL ... until a restart of the system." The two other critical updates are MS07-035 , which fixes a bug in the core Windows operating system's Win32 API (application programming interface), and MS07-034 , which fixes bugs in Outlook Express and Windows Mail. Because MS07-035 could be exploited via the Web, it should also be patched as soon as possible, Sarwate said. The other updates released Tuesday fix less-critical flaws in Windows Vista and Microsoft's Visio drawing software. The Vista update is noteworthy because it marks the first time that Microsoft has patched a flaw that was introduced in the Vista operating system, Sarwate said. Previous Vista patches have repaired "legacy" code that was written for earlier versions of Windows, and then reused in Vista. But the MS07-032 update applies to Vista only. This flaw, rated "moderate" by Microsoft, could allow an attacker to gain unauthorized access to information such as administrative passwords stored within Windows.
17746
SEATTLE -- Microsoft released a patch for its latest &quot;critical&quot; rated security flaw affecting its Windows, Office and developer tools software programs, the company said Tuesday.
427832
Microsoft Corp. MSFT.O released on  Tuesday a patch for its latest "critical" rated security flaw  affecting its Windows, Office and developer tools software  programs.
342042
This month's Patch Tuesday will be a light one in comparison with those before it, with only three updates due next week. However, Microsoft's patch for Office shouldn't be taken lightly; its rating will be "Critical," the company said Thursday.
713300
A stitch in time... Microsoft this week pushed out a patch to resolve a flaw in its patching system.â¦
388719
(InfoWorld) - Microsoft Corp. plans to patch its Windows and Visual Studio products next week, but it does not have a fix in the works for aÂ widely publicized flaw in Word, which hackers are reportedly exploiting in targeted attacks. The company's security team is readying five sets of patches for Windows, and will also issue a single critical security update for Visual Studio, Microsoft said in an alert published Thursday. Microsoft rates the most serious of its Windows updates as "critical," meaning an attacker could exploit the underlying flaw to run malware on a victim's PC with no user action, the company said. These security patches are usually released on the second Tuesday of each month, and the company strives to publish a small number of updates in December, because IT operations are often short-staffed during the holiday season. On Tuesday, Microsoft warned of a vulnerability in its Word software that had been reportedly used in online attacks. Security researchers rated this flaw critical, because an attacker could exploit it to run malicious software on a victim's PC. For such an attack to work, however, the victim would first have to be tricked into opening a maliciously encoded Word file. The Word flaw is not scheduled to be patched next Tuesday, said a spokesman for Microsoft's public relations firm. There is, however, one critical Visual Studio flaw that may be addressed in the updates. That bug is in Visual Studio 2005's WMI Object Broker ActiveX object. It was first reported in late October.
443156
Microsoft quietly released a patch aimed at improving the performance of Internet Explorer 7's phishing filter ahead of the company's regular patching schedule.
442477
Now that Windows Vista has been unleashed onto an expecting public, a number of minor issues have cropped up in the new operating system. Microsoft has already posted a handful of hotfixes for those running into issues, although they aren't critical enough to be published on Microsoft Update.
744189
InfoWorld - Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.
475359
InfoWorld - Microsoft has quietly released a patch aimed at improving the performance of Internet Explorer 7&#39;s phishing filter ahead of the company&#39;s regular patching schedule, which occurs on the second Tuesday of every month.