Microsoft to patch critical Windows, Office flaws

Article

Microsoft to patch critical Windows, Office flaws

Bill Brenner, Senior News Writer

After getting 13 security updates for flaws in a variety of Microsoft programs last month, IT administrators might have been hoping for a lighter patch load for July.

If so, they're

    Requires Free Membership to View

    SearchSecurity.co.UK members gain immediate and unlimited access to breaking UK industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.co.UK today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.co.uk you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.co.uk is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

in for an unpleasant surprise.

The software giant announced on its TechNet site Thursday that customers can expect seven security bulletins this month: four for Microsoft Windows and three for Microsoft Office. Some fixes will address critical security holes, the vendor said.

Windows patches will be available via the Microsoft Baseline Security Analyzer and Enterprise Scan Tool, and some updates will require a restart. Office patches will be available via the Microsoft Baseline Security Analyzer and the updates may require a restart.

As it does every month, Microsoft will also release an updated version of its Windows Malicious Software Removal Tool and will host a Webcast Wednesday to address any questions IT administrators have regarding this month's updates. The company will also release one non-security, high-priority update Tuesday.

"Although we do not anticipate any changes, the number of bulletins, products affected, restart information and severities are subject to change until released," Microsoft said.

It's unclear if any of this month's patches will address some of the flaws that have come to light since Microsoft's June 13 patch release. Since then:

  • Several new Internet Explorer flaws have been targeted with exploit code.

  • Cupertino, Calif.-based antivirus giant Symantec Corp. has warned of proof-of-concept code targeting a security hole in Microsoft Windows Live Messenger, the instant messaging client formerly called MSN Messenger.

  • Zero-day flaws in Microsoft Excel have been targeted with exploit code.

    Last month's patch release addressed flaws in Windows, Internet Explorer, Exchange, Media Player, PowerPoint and Word.