Microsoft warns of major Patch Tuesday update

Powered by SC Magazine
 

Covers 25 flaws, five rated 'critical'.

Microsoft has released its advanced notification for April's Patch Tuesday update, which will address 25 problems in 11 security bulletins.

Five of the vulnerabilities are rated 'critical', and apply to enterprise applications including Microsoft Office and Exchange. Affected operating systems include Windows 2000, XP, Vista, 2003, 2008 and Windows 7.

The critical flaws could allow a remote attacker to take control of a machine, install malicious software, or contribute to a denial-of-service attack.

Alan Bentley, vice president at security firm Lumension, urged IT departments to prepare for the patches well in advance.

"IT departments will have to address and patch almost every endpoint in the organisation, including servers, laptops and desktops," he said.

"They should plan ahead as to how they are going to test and then deploy these patches with minimal interruptions to employee productivity."

Wolfgang Kandek, chief technology officer at vulnerability management firm Qualys, agreed that this month's large security update will keep system administrators busy.

"An attacker can use these vulnerabilities to remotely execute code on the victim's machine, and they should be addressed as quickly as possible," he said.

However, Kandek added that Windows 7 has been left relatively unpatched, suggesting that it is a more secure platform that previous releases.

"Windows 7 has fewer critical updates to install than the older operating system versions, an indication that the newer version of Windows is more robust and secure out of the box," he said.

Many of the fixes require a system restart, according to Microsoft, and just one earns the lowly rating of 'moderate'.

One of the problems likely to be patched is the F1 key issue reported earlier this year that affects Internet Explorer.

Copyright ©v3.co.uk


Microsoft warns of major Patch Tuesday update
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
More 4G from Optus in Darwin
Nov 21, 2014
Click to see where Optus has expanded coverage to the suburbs near Darwin.
Optus steps up regional 4G coverage
Nov 20, 2014
Once 700Mhz services are working, Optus claims regional users will have a "faster and more ...
This Huawei 4G phone costs $99
Nov 12, 2014
The $99 Huawei Ascend Y550, available through Vodafone, enters the budget market as one of the ...
4G smartphones: Microsoft's Lumia 830
Nov 7, 2014
Microsoft has announced its flagship Windows Phone, the Nokia Lumia 830 4G, will be available in ...
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1032

Vote