Microsoft To Release 4 Critical Office Patches Tuesday
Microsoft announced that it will be releasing four patches, all rated critical because they allow remote-code execution, and all involving Microsoft Office in some way.
In today's March Patch Tuesday preview, Microsoft announced
that it will be releasing four patches, all rated critical because they allow
remote-code execution, and all involving Microsoft Office in some way.
As is typical with its preview announcements, the company didn't release details
on the exact flaws the patches will fix, but did detail the systems affected.
The first patch is for Excel and is rated critical -- Microsoft's highest rating
-- for Excel 2000 SP3, but is rated only as important for other versions of
Excel, including Excel 2003 (although SP3 of 2003 is not affected) and Excel
2007, as well as Office 2004 and 2008 for Mac.
The second patch is critical for the following versions of Outlook: Outlook 2000 SP3, Outlook 2002 SP3, Outlook 2003 SP2 and SP3, and Outlook 2007.
The third patch is critical only for Microsoft Office 2000 SP3. The patch is
rated important for several other programs, including Office XP SP3 and Office
for Mac 2004.
The final patch planned for this month's batch is rated critical for Microsoft
Office Web Components 2000. According to Microsoft, updates have already been
released to fix the flaw (whatever it might be) in several Microsoft products,
including Visual Studio .NET, BizTalk Server, Office 2000 and XP.
Microsoft is also planning to release three "high-priority, non-security updates" through Windows Server Update Service (WSUS) and Windows Update.
As always, Microsoft cautioned that the information released today is preliminary
and may change before the official release Tuesday.
Becky Nagel is the vice president of Web & Digital Strategy for 1105's Enterprise Computing and Education Groups, where she oversees the front-end Web team and deals with all aspects of digital strategy for the groups. She also serves as executive editor the ECG Web sites, and you'll even find her byline on PureAI.com, the ECG group's newest site for enterprise developers working with AI. She recently gave a talk at a leading technical publishers conference about how changes in Web technology may impact publishers' bottom lines. Follow her on twitter @beckynagel.