News

Microsoft Releases 12 Security Bulletins, 8 Critical

Microsoft on Tuesday delivered its promised heavy load of security bulletins, including two patches for critical flaws already in the public domain.

In all, Microsoft put out 12 security bulletins, one less than the company warned subscribers about last week in its Microsoft Security Bulletin Advanced Notification. Those bulletins covered 17 security vulnerabilities. Ten of the security vulnerabilities covered in eight of the bulletins are critical flaws, according to Microsoft's rating system.

Many of the flaws involved various flavors of the Windows operating system, with nine different bulletins addressing problems with Windows. Other Microsoft bulletins addressed problems in Office, Internet Explorer, .NET, Windows Media Player, Windows Messenger, MSN Messenger, Project and Visio.

Flaws in the public domain usually cause the most concern. Most vulnerabilities are secret until Microsoft patches them, giving attackers and users the same starting line in the race on the one hand to exploit the flaws and on the other hand to patch the vulnerabilities.

One of the critical public flaws patched Tuesday affects Windows and could allow remote code execution from a flaw in an ActiveX control. The bulletin, MS05-013, is critical for Windows 2000, Windows 98, Windows 98 Second Edition and Windows ME. It is classified important for Windows XP with Service Pack 2 and moderate for Windows Server 2003.

The other critical public flaw involves a vulnerability in PNG processing that could allow an attacker to take complete control of a user's system over the Internet. It is addressed in bulletin MS05-009, which covers Windows Messenger, MSN Messenger and Windows Media Player.

The bulletin that includes the most patches is MS05-014, a cumulative update for Internet Explorer. The cumulative update includes patches for two critical vulnerabilities, an important vulnerability and a moderate flaw.

To view Microsoft's summary of the month's patches, click here.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Windows 10 Preview Adds Ability To Display Linux Distro Files

    Microsoft on Wednesday announced Windows 10 preview build 19603, which adds easier access to installed Linux distro files using Windows File Explorer.

  • Microsoft 365 Business To Get Azure Active Directory Premium P1 Perks

    Subscribers to Microsoft 365 Business (which is being renamed this month to "Microsoft 365 Business Premium") will be getting Azure Active Directory Premium P1 licensing at no additional cost.

  • How To Use .CSV Files with PowerShell, Part 1

    When it comes to bulk administration, few things are handier than .CSV files. In this two-part series, Brien demos his top techniques for working with .CSV files in PowerShell. First up: How to create a .CSV file.

  • SameSite Cookie Changes Rolled Back Until Summer

    The Chromium Project announced on Friday that it's delaying enforcement of SameSite cookie changes, and is temporarily rolling back those changes, because of the COVID-19 turmoil.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.