Software // Enterprise Applications
News
12/7/2006
02:18 PM
Connect Directly
RSS
E-Mail
50%
50%

Microsoft To Fix Six Flaws Next Week

Microsoft doesn't disclose the exact components, services, or applications to be patched prior to delivering the updates, but only offers clues about what it plans to fix.

Microsoft said Thursday that it will release six security updates next week to bring the year's total to 77, a new record.

In the advance notification posted mid-morning Thursday, Microsoft announced it would roll out five updates for Windows and one that targets Visual Studio, one of the company's development platforms. At least two of the updates will be labeled "critical," Microsoft's highest warning.

Microsoft doesn't disclose the exact components, services, or applications to be patched prior to delivering the updates on the second Tuesday of each month, but only offers clues about what it plans to fix. Some hints can be gleaned from third-party security vendors that track zero-day, or unpatched, vulnerabilities.

eEye Digital Security's new Zero-Day Tracker site, for instance, lists a flaw in Visual Studio 2005 that was first disclosed 37 days ago on Oct. 31. Microsoft posted a security advisory outlining the problem that same day.

eEye also lists several other outstanding Windows vulnerabilities, any of which may be the subject of a Tuesday update. Among them is a 41-day-old critical flaw in Internet Explorer, a 37-day-old bug in the Internet Connection Sharing service, and a 15-day-old vulnerability in Windows Media Player. An unpatched bug in Microsoft Word that's being exploited by attackers will probably not make the cut next week.

The six bulletins expected Tuesday will put the year's total at 77, five more than the previous record of 72 set in 2002.

The updates will be available for manual download from the Microsoft Web site on Tuesday, Dec. 12, at about 10 a.m. PDT. As usual, automatic updates to users' computers will begin shortly after that.

Comment  | 
Print  | 
More Insights
Building A Mobile Business Mindset
Building A Mobile Business Mindset
Among 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps and it's past time for those with no plans to get cracking.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Must Reads Oct. 21, 2014
InformationWeek's new Must Reads is a compendium of our best recent coverage of digital strategy. Learn why you should learn to embrace DevOps, how to avoid roadblocks for digital projects, what the five steps to API management are, and more.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
A roundup of the top stories and trends on InformationWeek.com
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.