Microsoft has lined up 11 patches that collectively address 25 security vulnerabilities as part of its April Patch Tuesday security update.
Five of the scheduled patches fix critical flaws, all involving Windows vulnerabilities. All supported versions of Windows are addressed by this much heavier than usual update batch. “Important” patches for Microsoft Office and Microsoft Exchange are also being loaded up for delivery next week.
Microsoft is due to fix two open zero-day vulnerabilities, notes Wolfgang Kandek, CTO at vulnerability scanning services firm Qualys. These are the F1 attack through Internet Explorer and the SMBv2 Denial of Service vulnerability, which only affects Windows 7 and Windows Server 2008.
The critical flaws could allow a remote attacker to take control of a machine, install malicious software, or contribute to a denial-of-service attack.
Alan Bentley, vice president at security firm Lumension, urged IT departments to prepare for the patches well in advance.
“IT departments will have to address and patch almost every endpoint in the organisation, including servers, laptops and desktops,” he said.
“They should plan ahead as to how they are going to test and then deploy these patches with minimal interruptions to employee productivity.”
Wolfgang Kandek, chief technology officer at vulnerability management firm Qualys, agreed that this month’s large security update will keep system administrators busy.
- Similar posts
- Largest ever Windows update patch tomorro (45.3%)
- Adobe reader exploit to be patched this tuesday (26.6%)
- Microsoft boss upbeat about windows 7 (21.9%)
- Internet Explorer security flaw (21.9%)
- Microsoft's Security Bulletin for September (19.1%)
- Blackberry launches Playbook (17%)
- Microsoft issues its biggest-ever security fix (14.5%)
One Response to “Microsoft April patchday notes.”
Leave a Reply
You must be logged in to post a comment.
June 4th, 2010 at 4:34 am
Microsoft has released a list of bulletins and patches for the upcoming Patch Tuesday. 10 security updates will be distributed next Tuesday, patching a record-tying 34 vulnerabilities. The update will patch vulnerabilities in Windows, Internet Explorer, Office and SharePoint.
Out of the 10 bulletins, three were labeled as “Critical,” Microsoft’s highest severity level, the other seven patches were labeled as “Important,” the next level down from Critical. The patches will address remote code executions (RCE), elevation of privileges and tampering.
The patches will fix security holes in the following operating systems and software:
* Windows 2000 SP4
* Windows XP SP2 & SP3
* Windows Vista SP2
* Windows 7
* Windows Server 2003 SP2
* Windows Server 2008 SP2
* Internet Explorer 6, 7 & 8
* Microsoft Office 2003
* Microsoft Office 2007
* Microsoft Office 2008 Mac
* Microsoft Office SharePoint Services 3.0 SP1