Microsoft Patched 21 Security Flaws

As it has announced prior, Microsoft released yesterday the suite of twelve patches that fixed no less than 21 separate security vulnerabilities in the Windows operating system, in the Microsoft Office application and in Exchange e-mail server software.

19 out of the 21 security issues are vulnerabilities that could have allowed "remote code executions", a term that translates in the possibility that a hacker may take control over the user's PC and install programs, steel, corrupt or delete data or use it to launch additional attacks on other computers and networks.

"There are a couple different vulnerabilities. Some are IE browser problems, some affect the Media Player, ART (Automated Reasoning Tool) imaging and JScript," said Chris Andrew, vice president of security technologies at PatchLink. "IT managers will probably have to patch every single desktop."

The sole impediment that stands in the way of hackers exploiting the vulnerabilities is the simple fact that the user has to open an infected file such as a PowerPoint slideshow, Word document or Media Player picture.

Out of the 12 patches no less than 8 were deemed "critical", six of which address Windows problems. The two Microsoft Office updates were also of a critical nature, the rest having a severity level of "important" and only a spoofing vulnerability being declared "moderate".

The security patches have been certified by Softpedia as being 100% FREE and are available for download here.

RELATED LINKS

Microsoft Launches Office Business Application Strategy

Forefront, New Microsoft Rebranding

Robert Scoble Leaves Microsoft

Microsoft ventures in Europe

New Microsoft Software Development Center in Zurich

Business Intelligence from Microsoft