News

Microsoft Releases Security Notices

Microsoft has released updates on two recent security bulletins. On October 22, Microsoft released a bulletin on the availability of a patch that improves the randomness of TCP Initial Sequence Generators. Recently, however, Microsoft learned that the patch contains a regression error and, as a result, has removed it from the Microsoft Web site.

The patch is affected by the same error that was recently announced in Windows NT 4.0 Service Pack 6. The effect of the error is to prevent some applications from connecting to the server via Winsock unless run in an administrative context. The error is not associated with TCP Initial Sequence numbers, nor does it pose any security risk.

Microsoft has also announced a re-release of a patch originally announced on October 18. That patch was a workaround for a vulnerability that would allow a malicious Web site operator to read files on the computer of a user who had visited the site. Microsoft has completed a patch that completely eliminates the vulnerability. Microsoft Internet Explorer 4.01 and 5 are affected by the vulnerability. The patch is available at http://www.microsoft.com/msdownload/iebuild/jsredir/en/jsredir.htm. The IE 4.01 patch requires IE 4.01 SP2 in order to install. That is available at http://www.microsoft.com/Windows/ie/download/windows.htm.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Warns IT Pros on Windows Netlogon Fix Coming Next Month

    Microsoft on Thursday issued a reminder to organizations to ensure that their systems are properly patched for a "Critical"-rated Windows Netlogon vulnerability before next month's "update Tuesday" patch distribution arrives.

  • Microsoft Nudging Skype for Business Users to Teams

    Microsoft on Thursday announced some perks and prods for Skype for Business unified communications users, with the aim of moving them to the Microsoft Teams collaboration service instead.

  • How To Improve Windows 10's Sound and Video Quality

    Windows 10 comes with built-in tools that can help users get the most out of their sound and video hardware.

  • Microsoft Offers More 'Solorigate' Advice Using Microsoft 365 Defender Tools

    Microsoft issued yet another article with advice on how to use its Microsoft 365 Defender suite of tools to protect against "Solorigate" advanced persistent threat types of attacks in a Thursday announcement.

comments powered by Disqus