Three critical fixes in MS July security update

Get those peril-sensitive sunglasses on standby

homeless man with sign

It's that time of the month again. Microsoft's patch bandwagon rolled into town yesterday loaded with three critical updates.

The updates aim to fix a vulnerability found in the Color Management Module of Windows that could allow remote code execution (MS05-036) and a security bug in JView Profiler (MS05-037) that might be used to crash Internet Explorer and inject hostile code. Last, but not least, is a vulnerability in several Microsoft Word versions involving font parsing that could also be used as a conduit to smuggle malicious code onto vulnerable systems (MS05-035). US CERT has produced an overview of Microsoft's three critical security fixes here. ®

Related stories

MS issues final software update for Win2K
10 vulns - three critical - in MS patch batch
Microsoft issues solitary patch
Microsoft fortifies monthly patches with interim advisories
SANS revises Top 20 security vulns list

Sponsored: 10 ways wire data helps conquer IT complexity