Microsoft readies four patches in end-of-summer update

Share this article:
Updated on Thursday, Sept. 4 at 2:44 p.m. EST

Microsoft on Thursday said it plans to deliver four patches in next week's monthly security update to correct a number of vulnerabilities labeled "critical."

The fixes address bugs in Windows, Media Player, Media Encoder and Office, according to an advance notification advisory.

The patches earn the "critical" rating because they fix flaws that could be exploited to execute remote code.

For IT administrators, the Windows OS patch appears the most problematic because it affects a wide range of Microsoft applications and operating systems, including Server 2003, SQL Server 2005, Vista and Visual Studio 2008, said Andrew Storms, director of security operations at network security firm nCircle.

"This means that even though you thought your enterprise was in a good base configuration, what's going to happen next week is you're pretty much going to have to hit every enterprise client or server installation [with a patch]," Storms told SCMagazineUS.com on Thursday.

Microsoft does not plan to release any "important" patches but does expect to issue an updated version of its Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.

September's security update is a far cry from last month's, when the software giant pushed out 11 fixes for 26 vulnerabilities.
Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Millenials improve security habits, more interested in cyber careers, still need guidance

Millenials improve security habits, more interested in cyber ...

Raytheon's second annual survey on the online and security behavior of Millennials shows improvement but still a long way to go.

Pakistani man indicted over spyware app creation

Hammad Akbar created StealthGenie, which allowed the purchaser to secretly monitor a cell phone's communications.

FDA finalizes guidelines on medical device, patient data security

The recommendations are aimed at providing better protecting patient health and data, as well as hoping device manufacturers take into account cybersecurity risks in the early stages of development.