Feeds

Office and Mail bugs star in May Patch Tuesday update

Devil in the detail

Top 5 reasons to deploy VMware with Tegile

Microsoft released just two updates on Tuesday as part of a light patch Tuesday, especially in comparison with April's 11 bulletins.

May's batch contains a fix (MS10-030) for a critical vulnerability in Windows Outlook Express, Windows Mail and Windows Live Mail. Left unchecked, the vulnerability created a mechanism for remote code execution.

In practice, however, a fair bit of user interaction would probably be needed to pull off an attack. Even though Redmond defines the update as critical the vulnerability is not being actively exploited by hackers. It affects applications most frequently used by consumers and small businesses.

The second bulletin (MS10-03) covers a remote code execution flaw in supported versions of Microsoft Office, and is labelled as "important".

A recently discovered vulnerability in Microsoft's SharePoint enterprise portal software was not addressed by the latest batch of security updates. Wolfgang Kandek, CTO at vulnerability scanning firm Qualys, commented: "We recommend looking into the advisory and implementing the suggested work-around which restricts the access to the Help functionality in SharePoint."

Alan Bentley, VP International for Lumension, warned that newly discovered vulnerabilities in third-party browser software pose a threat to Windows users.

“A new Safari vulnerability that impacts Windows remains un-patched and Proof of Concept Code (POC) is freely downloadable on the Internet. The biggest concern here is that Safari is often installed silently when a user chooses to install QuickTime on their Windows PC," Bentley said.

Microsoft's summary of its May Patch Tuesday can be found here. The Internet Storm Centre's rather more readable overview is here. ®

Beginner's guide to SSL certificates

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.