MS patch day: nothing critical
Print storySolitary fix. Stay calm
Posted in Anti-Virus, 12th May 2004 10:59 GMT
Free whitepaper – Avoiding 7 common mistakes of IT security compliance
The Microsoft patch train rolled back into security central last night with a mercifully light load. In contrast to last month when we had four patches addressing 20 vulnerabilities - including the flaw infamously exploited by the Sasser worm - this month around we have just a single, solitary new patch.
This patch corrects a flaw with Windows Help and Support that could allow hackers to inject malicious code into vulnerable XP or Windows 2003 systems. Redmond designates the flaw as important, one below the dreaded critical rating.
Microsoft also took the opportunity to reissue the patch (MS04-014) that addresses a Jet Database Engine code execution vulnerability, first released last month. Finally Microsoft reissued a Windows NT Server 4.0 Terminal Server Edition fix, first distributed three years ago, to "addresses an additional denial of service vulnerability". ®
Related stories
Windows Update groans under patch load
MS score card: four patches, 20 vulns, heaps of trouble
MS March patch batch low on peril
Sasser ups cost of Windows - Gartner
Sasser worm creates havoc
Free whitepaper – Certify your software integrity with Thawte code signing certificates
The best practices guide for application security
Reducing messaging and web security costs with managed services
Avoiding 7 common mistakes of IT security compliance
Certify your software integrity with Thawte code signing certificates
The future of SaaS and IT infrastructure management
Feds: Hospital hacker's 'massive' DDoS averted
Buggy 'smart meters' open door to power-grid botnet
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive