Four Microsoft fixes planned for Patch Tuesday

By

Microsoft is planning four patches -- two rated "critical -- in Tuesday's monthly security update.

Microsoft announced Thursday it plans to push out four fixes -- two rated "critical" -- as part of its monthly security update next week.

The "critical" patches address vulnerabilities in Internet Explorer (IE) and Microsoft Exchange Server, while the fixes labeled "important" involve bugs in SQL Server and Visio, a drawing software product.

The IE issue, though, only is "critical" in Windows XP and Vista, while it is labeled "moderate" in Windows Server 2003 and 2008. The Exchange issue is "critical" for all supported editions: 2000, 2003 and 2007.

Corey Thomas, vice president of product management at vulnerability assessment firm Rapid7, said he would not be surprised if more Exchange vulnerabilities emerge, considering the latest version contains more features, such as calendaring functionality and RSS feeds.

"The more code and the more things that you have turned on that you're actively managing or trying to keep up with...the more configuration issues you have," he said.

See original article on scmagazineus.com


Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?