Microsoft delivered six patches on Tuesday, five of which address critical vulnerabilities, as part of its regular patch Tuesday update cycle.

Two of the five critical patches address flaws that have been actively exploited by hackers this month - a flaw in XML Core Services (MS06-071) and an Internet Explorer remote code execution flaw (MS06-067).

The other three critical updates resolve flaws in Macromedia Flash Player version 6 from Adobe (which ships with XP Service Pack 2 and XP Professional x64 Edition), flaws in Workstation Service, and bugs in the Remote Agent component of Windows.

Redmond also issued an "important" update designed to address a security bug in client service for NetWare.

Microsoft's bulletin summary can be found here. ®

Related stories

• Three critical patches star in MS update (13 December 2006)

  https://www.theregister.com/2006/12/13/ms_patch_tuesday/

• VoIP and IE risks star in SANS' threat list (16 November 2006)

  https://www.theregister.com/2006/11/16/sans_top_20/

• MS preps six fixes for November Patch Tuesday (10 November 2006)

  https://www.theregister.com/2006/11/10/nov_patch_tuesday-pre-alert/

• IE7 unleashed (19 October 2006)

  https://www.theregister.com/2006/10/19/ie7_release/

• Windows Update glitches derail Patch Tuesday (11 October 2006)

  https://www.theregister.com/2006/10/11/october_patch_tuesday/

• Patch Tuesday - and other days of the week (11 October 2006)

  https://www.theregister.com/2006/10/11/days_of_the_week/

• Busy Patch Tuesday looms (6 October 2006)

  https://www.theregister.com/2006/10/06/october_patch_tuesday_pre-notice/

• Another day, another zero-day MS exploit (28 September 2006)

  https://www.theregister.com/2006/09/28/0-day_powerpoint_threat/

• MS releases emergency IE fix (27 September 2006)

  https://www.theregister.com/2006/09/27/ms_emergency_patch/