MS patch day: nothing critical
Solitary fix. Stay calm
Posted in Malware, 12th May 2004 10:59 GMT
Free whitepaper – Transforming IT culture
The Microsoft patch train rolled back into security central last night with a mercifully light load. In contrast to last month when we had four patches addressing 20 vulnerabilities - including the flaw infamously exploited by the Sasser worm - this month around we have just a single, solitary new patch.
This patch corrects a flaw with Windows Help and Support that could allow hackers to inject malicious code into vulnerable XP or Windows 2003 systems. Redmond designates the flaw as important, one below the dreaded critical rating.
Microsoft also took the opportunity to reissue the patch (MS04-014) that addresses a Jet Database Engine code execution vulnerability, first released last month. Finally Microsoft reissued a Windows NT Server 4.0 Terminal Server Edition fix, first distributed three years ago, to "addresses an additional denial of service vulnerability". ®
Related stories
Windows Update groans under patch load
MS score card: four patches, 20 vulns, heaps of trouble
MS March patch batch low on peril
Sasser ups cost of Windows - Gartner
Sasser worm creates havoc
The Register Webcast - Desktop Support : The Hub of IT
The Register Guide to managing spam
The Register Green Computing Report
Secure Mobile Working
Risk and Resilience
