Microsoft warns of major Patch Tuesday update

Powered by SC Magazine
 

Covers 25 flaws, five rated 'critical'.

Microsoft has released its advanced notification for April's Patch Tuesday update, which will address 25 problems in 11 security bulletins.

Five of the vulnerabilities are rated 'critical', and apply to enterprise applications including Microsoft Office and Exchange. Affected operating systems include Windows 2000, XP, Vista, 2003, 2008 and Windows 7.

The critical flaws could allow a remote attacker to take control of a machine, install malicious software, or contribute to a denial-of-service attack.

Alan Bentley, vice president at security firm Lumension, urged IT departments to prepare for the patches well in advance.

"IT departments will have to address and patch almost every endpoint in the organisation, including servers, laptops and desktops," he said.

"They should plan ahead as to how they are going to test and then deploy these patches with minimal interruptions to employee productivity."

Wolfgang Kandek, chief technology officer at vulnerability management firm Qualys, agreed that this month's large security update will keep system administrators busy.

"An attacker can use these vulnerabilities to remotely execute code on the victim's machine, and they should be addressed as quickly as possible," he said.

However, Kandek added that Windows 7 has been left relatively unpatched, suggesting that it is a more secure platform that previous releases.

"Windows 7 has fewer critical updates to install than the older operating system versions, an indication that the newer version of Windows is more robust and secure out of the box," he said.

Many of the fixes require a system restart, according to Microsoft, and just one earns the lowly rating of 'moderate'.

One of the problems likely to be patched is the F1 key issue reported earlier this year that affects Internet Explorer.

Copyright ©v3.co.uk


Microsoft warns of major Patch Tuesday update
 
 
 
Top Stories
Feeling Shellshocked?
Stay up to date with patching for the Bash bug.
 
Amazon forced to reboot EC2 to patch Xen bug
Rolling restarts over next week.
 
Vodafone reveals plans to store users' online activity
Says retrieval under Govt proposal will impose massive cost.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Constantly rushing to the printer to stop other people seeing your printouts?
Sep 24, 2014
Lexmark's latest family of small-business printers include a feature that lets you stop anyone ...
This 4G smartphone costs $219
Sep 3, 2014
It's possible to spend a lot less on a smartphone if you're prepared to go with a brand you ...
Looking for storage? Seagate has five new small business NAS devices
Aug 22, 2014
Seagate has announced a new portfolio of Networked Attached Storage (NAS) solutions specifically ...
Run a small business in western Sydney?
Aug 15, 2014
This event might be of interest if you're looking to meet other people with a similar interest ...
Buying a tablet? Microsoft's Surface Pro 3 goes on sale this month
Aug 8, 2014
Microsoft has announced its Surface Pro 3 will go on sale in Australia on 28 August from ...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  66%
 
Advanced persistent threats
  4%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1355

Vote