Three critical updates by ‘Patch Tuesday’
The July 'Patch Tuesday' of Microsoft addresses the flaws first in Excel, then in Windows server 2000 and 2003 and finally in .Net Framework 1.0, 1.1 and 2.0, all in Windows Vista supported versions.
Apart from the security updates, Microsoft will also release a developed version of the Microsoft Windows Malicious Software Removal Tool. Besides this, it will release 4 non-security updates on Windows Server Update Services and on Microsoft Update. And lastly, it is also planning to launch one non-security, high priority update for Windows on Server Update Services and Windows Update.
Microsoft did not disclose much about the fixes before their release. However, one known flaw in Excel, recognized in February, leads to the crash of application when the spreadsheet is opened. As per the news published by Technewsworld.com on July 9, 2007, research team lead for McAfee Averts Labs, Monty Ijzerman, told to the E-commerce Times that it could be amongst the issues for patch Tuesday.
Further, Microsoft has issued updates to patch 15 bugs in June. Dave Marcus, security research and communications manager at McAfee Averts Labs said in an interview that the patches of June represent the risk of surfing the net without any protection.
According to the news reported by Toptechnews.com on July 6, 2007, Dave said that many of the flaws attended by the fixes could be easily destroyed, if the user simply visits a nasty site, a popular method of attack among the cyber criminals.
No doubt, the amount of critical flaws has gone up over the last year (2006), but the successful execution of hacking has gradually come down because of increased awareness and Microsoft's stable monthly update procedure.
As per the news Technews.com reported on July 6, 2007, senior technical consultant with Kaspersky Lab, Shane Coursen, estimates that 2-3 years back update was not done, but nowadays most people receive them immediately after their release. He added that the company and users would soon receive the updates.
As per the news by Technews.com, Coursen explains that the hackers are spread all over the world and are waiting for the patches to release, so that they can destroy it and make them unavailable for the users.
Related article: Three New Threats With Highest Percentages in Top Ten
» SPAMfighter News - 18-07-2007