Microsoft planning nine security fixes for August

Microsoft is planning to issue at least nine security fixes this month.

The 11 August patch release will address issues in Windows, Office, Visual Studio and the Client for Mac software.

Five of the nine planned fixes have been rated 'critical', meaning that an attacker could remotely compromise a system and spread malware without user notification or interaction.

Only three of the five critical flaws affect Windows Vista, XP and Server 2008 users. Windows 2000 and Server 2003 are vulnerable to four of the flaws. The fifth critical vulnerability affects Office XP, 2003 and the Client for Mac component.

Another remote code execution vulnerability has been given the less serious rating of 'important'. This flaw affects Windows 2000, XP and Server 2003. The vulnerability also exists in Windows Vista and Server 2008, but has been given a 'moderate' risk rating due to built-in security protections.

Also included in the August update will be fixes for flaws in Windows and the .NET Framework, two of which could be exploited to obtain elevated privileges, and a third which could be used to perform a denial-of-service attack.

The update can be obtained automatically through Windows Update and Microsoft Update, as well as the company's support download site.