No less than three Microsoft security bulletins planned for release next week feature a maximum severity rating of Critical. The risk level is synonymous with remote code execution and the complete takeover of a compromised system, following the successful exploits of Critical vulnerabilities. According to the Redmond company, the flaws reside in Windows, Office and NET Framework. The information was made available as an
integer part of the Redmond company's Advance Notification for the July 2007 security updates.
"Next Tuesday, we're currently planning to release six security bulletins: three Microsoft Security Bulletins affecting Microsoft Windows with a Maximum Severity rating of Critical; two Microsoft Security Bulletins affecting Microsoft Office with a Maximum Severity rating of Critical and one Microsoft Security Bulletin affecting Microsoft .NET Framework with a Maximum Severity rating of Critical," explained Christopher Budd, Security Program Manager.
On July 10, 2007, Microsoft plans to release a total of six security bulletins addressing vulnerabilities in Office, Excel, Windows, .NET Framework, Office, Publisher, Windows XP Professional and Windows Vista. In addition to the three Critical flaws to be patched next week, Microsoft will also provide resolves for two security flaws rated as Important and one as Moderate.
More accurately, Microsoft will fix vulnerabilities in Publisher 2007, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats, Excel 2007, Excel 2003 Viewer, Excel 2003 SP2 and SP3, Microsoft .NET Framework from version 1.0 to 2.0, Windows Vista, Windows Server 2003 with SP2 and SP1, Windows XP Professional SP2 and Windows 2000 Server SP4.
"We are also planning to release an update to the Microsoft Windows Malicious Software Removal Too. Finally, we are planning to release four high-priority non-security updates on Microsoft Update and one on Windows Update. I want to remind everyone that we provide this information to help with your advance planning for the Tuesday release. This information can change between now and the release on Tuesday," Budd added.