Patch Tuesday Preview, And a Windows Warning
Microsoft plans to release just two security updates next week to fix problems with Windows and other software. Meanwhile, the company says it has received reports from Windows XP and Windows 2003 users that criminals are targeting an unpatched flaw in those operating systems.
Microsoft said it is aware of "limited attacks" targeting a vulnerability in a Windows component that handles Macrovision copy protection technology. Macrovision has separately released a patch to plug the security hole, and Microsoft says that it is working with the company to push out an update to fix the problem through its regular monthly patch process.
It's not clear which security holes Microsoft will plug next Tuesday, but if I had to guess I'd wager the company will fix this URI-handling vulnerability that crooks have been exploiting lately to break into Windows machines. Last week, attackers blasted out a run of junk e-mails containing maliciously crafted PDF files that -- when opened -- fetched and installed password-stealing programs on victims' machines.
If you're reading this between 11 a.m and 12:00 p.m. ET today and have a security-related question or conundrum, drop it in the queue at Security Fix Live.
Posted by: FreewheelinFrank | November 9, 2007 3:24 PM | Report abuse
Posted by: thedarkknight | November 11, 2007 12:35 AM | Report abuse
Posted by: ScrivenScript | November 12, 2007 9:39 AM | Report abuse
Posted by: PJ | November 12, 2007 3:57 PM | Report abuse
Posted by: TIGER | November 23, 2007 7:16 PM | Report abuse
Posted by: TIGER | November 23, 2007 7:17 PM | Report abuse
The comments to this entry are closed.