Microsoft Release Patch to Fix Flaws
408370
Microsoft Corp. announced Tuesday it has found a new security flaw with its Windows XP operating system and warned that an attacker could infiltrate other computers by persuading their owners to open a specialized graphics file.
427995
Microsoft is offering a patch for a critical security flaw related to the processing of JPEG images by its operating systems and other applications.
216439
Acknowledging that its patching process has "not been an example of our best work," Microsoft this week issued a second update to security bulletin MS06-042, which was released in August. The original patch included a security vulnerability - and it turns out the fix introduced even more.
184682
Microsoft has issued a formal fix for a problem in Windows XP Service Pack 2 that appeared almost immediately after the update&#39;s release.
492278
Microsoft Corp.  issued  six "critical" security patches on Tuesday to fix flaws in its  software products that the company warned could allow attackers  to take control of a user's computer.
172853
InfoWorld - Microsoft will release six sets of security patches next Tuesday, four of which will fix critical flaws in the Windows operating system.
416384
Microsoft Corp. released two security fixes Tuesday that carry its most severe threat rating, including one that applies even to computers that have downloaded the company's massive security update for the Windows XP operating system.
321788
Microsoft on Tuesday issued a patch for an earlier discovered flaw in Visual Studio 2005, while yet another cumulative patch for Internet Explorer was released, as well as one for a vulnerability within the Windows Media Format.
460090
NOVEMBER 11, 2004  - In sharp contrast to last month&#39;s barrage of critical patches, Microsoft Corp. on Tuesday offered up just one &quot;important&quot; fix for users to implement in its scheduled round of security updates for November.
737024
(InfoWorld) - Microsoft Corp. just can't seem to shake problems with itsÂ MS06-042 update for Internet Explorer. On Tuesday, Microsoft was forced toÂ release its third version of the update because of a new security bug discovered in the update, according to Tony Chor, a group program manager with Microsoft. First released on August 8, the critical patch fixes a handful of problems with the browser, but it has caused headaches for some users. Embarrassingly, it also introduced a security vulnerability into the browser, which was fixed last month. "The original release of MS06-042 introduced a new security vulnerability for IE 6.0 SP1 users which we addressed in a subsequent re-release," he wrote in aÂ Tuesday blog posting. "However... a similar vulnerability was also discovered in IE5.01 on Windows 2000, IE 6.0 SP1 (in a different location), and the original release of Windows Server 2003." Microsoft customers ran into problems with MS06-042 soon after it was released. Web sites that used HTTP (HyperText Transfer Protocol) 1.1 compression to speed up the downloading of images could cause the browser to fail and users of Web-based applications such as PeopleSoft, Siebel, and Sage CRM had problems with the software. Later in August, securityÂ researchers at eEye Digital Security Inc.Â disclosed that Microsoft had introduced a new critical security vulnerability in the update. Two days later Microsoft fixed the eEye bug in the MS06-042 re-release. Apparently this re-release did not address this latest but "similar" vulnerability mentioned by Chor. Microsoft executives could not be reached immediately for comment. Microsoft often re-issues its security updates to fix minor bugs, but the security issue discovered by eEye placed a lot more scrutiny on MS06-042. Ultimately the update proved to be an ordeal for Microsoft's Security Response Center, and for Microsoft customers.
101397
Microsoft plans to release patches for five Windows flaws next week, the software giant announced Thursday. The company posted the information on its TechNet site as part of a new program that gives the general
409013
Over a month and a half after completing Windows XP Service Pack 2 (SP2), Microsoft has finally released the first patch that fixes a problem with that release.
640711
Microsoft Corp.  on  Tuesday released three security patches to fix holes in its  Windows and Office software and warned one of the  vulnerabilities was "critical" because it could allow an  attacker to take over a user's computer.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
159505
Microsoft Corp. has patched critical flaws in Internet Explorer, Windows Media Player and Visual Basic with its last "Patch Tuesday" release of 2006.
645767
Microsoft Corp. MSFT.O on   Tuesday released three security patches to fix holes in its   Windows and Office software and warned one of the   vulnerabilities was "critical" because it could allow an   attacker to take over a user's computer.
411910
(InfoWorld) - Microsoft has released its monthly set of security patches , fixing problems in Windows, Internet Explorer and in the SSL (Secure Sockets Layer) software used for secure Web browsing. In total, Microsoft released six sets of patches, called updates, fixing 15 flaws in its products. Four of these updates are rated critical and administrators should patch them as soon as possible, security experts said Tuesday. Many of the flaws that Microsoft patched on Tuesday can be exploited via the Web. In particular the MS07-033 update, which fixes bugs in Internet Explorer and MS07-031 , which addresses a critical flaw in the SSL libraries used by Windows. The SSL flaw is particularly interesting because it affects users who are visiting supposedly trustworthy Web sites, and because it could also affect non-Microsoft browsers like Firefox and Opera, said Amol Sarwate, manager of Qualys, Inc.'s vulnerability research lab. "It will affect all the browsers that call the libraries that are in the Windows operating system," he said. Although Microsoft warned that this flaw could be used by attackers to run unauthorized software on the victim's computer, this would be hard to do. "Attempts to exploit this vulnerability would most likely result in the Internet Web browser or application exiting," Microsoft wrote in its MS07-031 bulletin. "The system would not be able to connect to Web sites or resources using SSL ... until a restart of the system." The two other critical updates are MS07-035 , which fixes a bug in the core Windows operating system's Win32 API (application programming interface), and MS07-034 , which fixes bugs in Outlook Express and Windows Mail. Because MS07-035 could be exploited via the Web, it should also be patched as soon as possible, Sarwate said. The other updates released Tuesday fix less-critical flaws in Windows Vista and Microsoft's Visio drawing software. The Vista update is noteworthy because it marks the first time that Microsoft has patched a flaw that was introduced in the Vista operating system, Sarwate said. Previous Vista patches have repaired "legacy" code that was written for earlier versions of Windows, and then reused in Vista. But the MS07-032 update applies to Vista only. This flaw, rated "moderate" by Microsoft, could allow an attacker to gain unauthorized access to information such as administrative passwords stored within Windows.