Fixes coming for Windows flaws

As part of its monthly patching cycle, Microsoft plans to release on Tuesday two security bulletins with fixes for flaws in Windows.

At least one of the alerts is deemed "critical," Microsoft's highest risk rating, the company said in a notice posted on its Web site on Thursday. Microsoft rates as critical any security threat that could allow a malicious Internet worm to spread without any action required on the part of the user.

Last month, Microsoft released one security bulletin covering three flaws in the way Windows handles certain graphics files. That bulletin was also tagged critical.

Microsoft's notice did not specify which components of Windows are being repaired with Tuesday's patches or how many flaws the update will tackle. Security researchers have noted several unpatched flaws outstanding in Microsoft products. For example, eEye Digital Security lists six vulnerabilities on its Web site for which it considers fixes overdue.

Additionally, security researchers over the past few weeks have come forward with flaws in Internet Explorer, the Web browser part of Windows. One of these vulnerabilities could let an attacker commandeer a PC, and Microsoft itself has warned that the hole is actively being exploited to download malicious code to vulnerable systems.

As part of its monthly patch day, Microsoft also plans to release an updated version of the Windows Malicious Software Removal Tool. The software detects and removes common malicious code placed on computers.

Microsoft gave no further information on the upcoming bulletins, other than stating that the Windows fixes will require restarting the computer.

The Redmond, Washington-based, software maker offers advance notification about patches so people can get ready to install the updates.

Microsoft said it will host a Webcast about the new fixes on Wednesday at 11 am PDT.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Phil Dobbie Is wholesale-only backhaul just a pipedream?
    The potential acquisition of Pipe Networks by SP Telemedia has raised the question about whether vertically integrated backhaul providers will mean higher wholesale prices for ISP customers.
  • Array Get extensions going in Firefox, redux
    Previously on Null Pointer we looked at getting extensions working in Firefox betas, and that was great until the fine folks at Firefox changed their minds.
  • Array How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • More blogs »

Tags

Back to top

Featured