Feeds

One, two, three, four MS patches at our door

Monthly fix number two

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

Microsoft yesterday released a set of four security patches in its second stab at releasing security fixes once a month.

A cumulative patch for Internet Explorer, a fix for a buffer overflow vulnerability in components of Microsoft's FrontPage Server and a patch for a flaw with Workstation Service that could crackers to inject code on vulnerable systems are all deemed critical by Redmond. A fix for a flaw in Microsoft Word and that could allow arbitrary Code to run is given the lower category of "important".

A buffer overflow vulnerability in the Microsoft Workstation service represents the most serious risk. Workstation service is responsible for handling remote connections between computers and network resources such as fileservers or networked printers and is enabled by default on vulnerable platforms (windows 2000 - SP2 and later - and XP).

Security tools vendor ISS warns that "vulnerability is a standard stack overflow, and therefore it may be relatively easy to exploit".

"Exploits written to take advantage of standard stack overflows are generally very robust, and are good candidates for use in the creation of Internet worms," it warns.

According to Network Associates, the vulns covered by the four patches "range in scope from allowing arbitrary code to be run on a users machine (all of them)... to a buffer overrun vulnerability in FrontPage Server Extension and another vulnerability in the SmartHTML Interpreter could lead to denial of service on the server running FrontPage Extension."

All the more reason then to apply Microsoft's security fixes, a summary of which can be found here and here. ®

Related Stories

MS shores up five critical security holes
Ballmer's new MS security fix - same patches, but 'nicer'
Beefed-up firewall, new version of Update for XP SP2
Microsoft shoots the Windows Messenger

Choosing a cloud hosting partner with confidence

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.