The Register® — Biting the hand that feeds IT

MS patch day: nothing critical

Solitary fix. Stay calm

By John Leyden • Get more from this author

Posted in Malware, 12th May 2004 10:59 GMT

Free whitepaper – Dell solid state disk (SSD) drives

The Microsoft patch train rolled back into security central last night with a mercifully light load. In contrast to last month when we had four patches addressing 20 vulnerabilities - including the flaw infamously exploited by the Sasser worm - this month around we have just a single, solitary new patch.

This patch corrects a flaw with Windows Help and Support that could allow hackers to inject malicious code into vulnerable XP or Windows 2003 systems. Redmond designates the flaw as important, one below the dreaded critical rating.

Microsoft also took the opportunity to reissue the patch (MS04-014) that addresses a Jet Database Engine code execution vulnerability, first released last month. Finally Microsoft reissued a Windows NT Server 4.0 Terminal Server Edition fix, first distributed three years ago, to "addresses an additional denial of service vulnerability". ®

Related stories

Windows Update groans under patch load
MS score card: four patches, 20 vulns, heaps of trouble
MS March patch batch low on peril
Sasser ups cost of Windows - Gartner
Sasser worm creates havoc

Free whitepaper – PowerEdge M-Series blades I/O guide

Webcast: Jumpstart your Application Security initiatives