Vista updates headline Patch Tuesday

By Shaun Nichols on Nov 15, 2007 6:51 AM
Filed under Security

Microsoft has bundled three stability fixes for Windows Vista into the November edition of its monthly security update.

The patches do not address any security risks, but fix issues including battery life in mobile devices and the time required to wake up from sleep mode.

The update also fixes networking issues between Media Center PCs and Xbox 360 consoles, along with a stability fix for Vista's USB Core component.

The security portion of the monthly update contains fixes for two vulnerabilities that affect users of Windows XP, 2000 and Server 2003.

Only one of the two fixes is rated 'critical'. The flaw exists in Windows XP and 2003 and could allow an attacker to remotely execute code.

The critical vulnerability lies within the way Windows handles Uniform Resource Indicator commands and has been actively targeted by attackers since late last month.

The second of the two patches affects users of Windows 2000 and 2003 and has been rated 'important'.

A DNS spoofing flaw could allow an attacker to alter the DNS server in Windows, providing the ability to redirect internet traffic requests, possibly sending users to phishing or malware sites without their knowledge.

Not patched in the update was a vulnerability in the Macrovision DRM software used by Windows Server 2003 and XP.

Classified as a low-risk flaw, the vulnerability has reportedly been known to Microsoft for more than three weeks and has been actively targeted by attackers for nearly a week.