The Microsoft patch train rolled back into security central last night with a mercifully light load. In contrast to last month when we had four patches [1] addressing 20 vulnerabilities - including the flaw infamously exploited by the Sasser worm - this month around we have just a single, solitary new patch.

This patch [2] corrects a flaw with Windows Help and Support that could allow hackers to inject malicious code into vulnerable XP or Windows 2003 systems. Redmond designates the flaw as important, one below the dreaded critical rating.

Microsoft also took the opportunity to reissue the patch (MS04-014 [3]) that addresses a Jet Database Engine code execution vulnerability, first released last month. Finally Microsoft reissued a Windows NT Server 4.0 Terminal Server Edition fix [4], first distributed three years ago, to "addresses an additional denial of service vulnerability". ®

Related stories

Windows Update groans under patch load [5]
MS score card: four patches, 20 vulns, heaps of trouble [6]
MS March patch batch low on peril [7]
Sasser ups cost of Windows - Gartner [8]
Sasser worm creates havoc [9]

Links

1. http://www.theregister.co.uk/2004/04/14/ms_patch_bonanza/
2. http://www.microsoft.com/technet/security/bulletin/MS04-015.mspx
3. http://www.microsoft.com/technet/security/bulletin/MS04-014.mspx
4. http://www.microsoft.com/technet/security/bulletin/MS01-052.mspx
5. http://www.theregister.co.uk/2004/04/15/windows_update_upgrade/
6. http://www.theregister.co.uk/2004/04/14/ms_patch_bonanza/
7. http://www.theregister.co.uk/2004/03/10/ms_march_patch_batch_low/
8. http://www.theregister.co.uk/2004/05/07/windows_worm_tax/
9. http://www.theregister.co.uk/2004/05/04/sasser_worm/