Microsoft Patches 7 Critical Vulnerabilities

By Nate Mook | Published July 11, 2007, 1:27 PM

As part of its Patch Tuesday updates this week, Microsoft corrected 10 vulnerabilities in Windows and Office, 7 of which were deemed "critical." Three critical flaws were fixed in Excel that could allow for remote code execution, while one was fixed in Windows 2000 and Server 2003.

The final critical patch was for the .NET Framework, correcting three vulnerabilities - two of which affect client systems and one affecting Web servers running ASP.NET. Lastly, one "important" vulnerability was patched in Office and another in Windows XP; and one moderate flaw was fixed in Vista. Vista's firewall could allow incoming unsolicited network traffic to access a network interface and gather information.

Comments

View comments by with a score of at least

Microsoft are continuing to bulls***ing their "Vista is secure" propaganda by downgrading serious security bugs to moderate.

Score: 0

|

moderate=does not allow remote control of the sustem.

Critical= allows remote execution or seriously compromises stability/performance/integrity on a majority of configurations.

nd one moderate flaw was fixed in Vista. Vista's firewall could allow incoming unsolicited network traffic to access a network interface and gather information.

This clearly falls under moderate.

Nice try, though.

Score: 0

|

One of the updates (KB939373) is "flawed!" It keeps wanting to install itself even after a successful install. Looks like Microsoft has not improved.

Score: 0

|

Updates installed fine for me...

Score: 0

|

Yea, that was a pretty rough patch of road. I experienced the same problem on 2 out of 3 of my computers.

If you (1) fully shut down after installation instead of restarting, or (2) repeat the update process a few times, it will eventually take. I'm not sure if one of those approaches is better than the other, but one worked with each of my patching problems.

(Thanks, Microsoft, for wasting at least two hours of my time last night until I figured out was was happening and *finally* patched your sieve of an OS.)

Score: 0

|

No problem here on 4 machines.

Score: 0

|

ive had the same problems on about 35-40 of the machines here at work, which is a considerably smaller perecentage then what you had, closer to 20% or so, but the full shutdown method hasnt been as effective as trying to reinstall it by hand, that is just download it off microsoft.com and install it off a jump drive, usually takes the first time. maybe doing it in safemode would yeild better results.

Score: 0

|

Same here, installed without a hitch on my laptop and 2 desktops.

Score: 0

|

Installer service is not running in safe mode, good luck trying that route :)

Score: 0

|

Someone doesnt understand the difference between software and ISO format definitions.

Score: 0

|

The more things change....

I can't believe that Office 2007 is so bad that you can still execute remote code through it. Yet they want ISO to standardize that. Also, didn't any of the "experts" at Ecma check the latest formula errors in MS-OOXML?

Holy freakin' crapzilla. Only a suite that toolie could love.

Score: 0

|

of someone who is forced to deal with compatability of file types and having to teach all their users the new programs...:-( i couldnt switch even if i wanted to.

although on the corperate side, office is included in our licensing agreement for very low extra cost and any other non open source program would cost us more. and open source is hard or impossible to get immediate help on the phone or email for support, although it does have a greater base of forum support.

Score: 0

|

Only a suite that toolie could love.

..you neglect to account for the millions of other users of the software. If it were just me, you wouldn't need to be posting here getting your "fanboy" on for ODF.

As for the formula errors, technically, they aren't "wrong", simply undefined.

Which, before you start calling me names and posting your links to your little shrine is wrong.

However, I'd like, as an example, for you to point out to me where these functions are defined in the ODF spec.

Oh, that's right....You can't. They aren't there. ODF supplies roughly *zero* forumula specs. Hence projects like OpenFormula to take care of that for them.

So technically, they are both leaving some key components undefined. It then boils down to a question of which approach is better. A partially defined spec, or none at all.

Personally, I'm actually *with* ODF on this one.

Score: 0

|

64MB of patches. How lovely.
That's a 10th of the size of the operating system (yes, I realise they're not just patching the OS).

Score: 0

|

Keep in mind, that for any system update (Windows, Office, OSX, FF, WeatherBug), even something as simple as a spelling error requires the entire file (dll or whatever) to be replaced. Then, there are cascading effects. When one file is changed, it often requires other files to be updated, and so on downstream. It gets very complicated, very large, very quickly.

Score: 0

|

Which is why Windows needs to move to a more modular design, like Linux systems.

Score: 0

|

that would be nice if it could do that and keep its gui and "ease of use"

dont excactly have the most computer literate of clients here...

Score: 0

|

Microsoft's Ray Ozzie: 'Nobody's going to be 100% open'

The mobile apps ecosystems of the world may converge over time, led by apps being ported over across platforms, according to the Chief Software Architect.

Will Firefox beat IE9 to Direct2D rendering?

Just days after Microsoft executives gave conference attendees a peek at a new rendering technology, a Mozilla contributor revealed he's working on the same thing.

Where there's smoke: Apple warranty stance raises troubling questions

Carmi Levy | Wide Angle Zoom: Smoking can be dangerous not only for your lungs, it appears, but for your Apple hardware warranty.

AOL's decision to rebrand as Aol. takes a bad brand and makes it worse

The idea behind the social Web is to crowd source before bringing out something new. But not at AOL, which new logo debuted with a cry of "fail!" across the blogosphere and Twittersphere today.

Microsoft 'worked with Apple' for Silverlight on iPhone, says Goldfarb

By not making such a big deal out of trying to stream video to the iPhone, Microsoft got a big deal out of it, revealed the Silverlight product manager.

Clicker.com cuts through the Web video chaos

In a world where homemade video and Hollywood movies travel the same pipeline, it's good to have a real search engine to cut through the clutter.

A case study in improving software: What Office 2010 can learn from Notion 3

A music composition product gambles with a complete overhaul, in an effort to make headway against two well-known competitors in a tough market.

Kindle 2 update adds battery life, native PDF reader

Amazon has pushed out an update to the Kindle 2 e-reader that lengthens battery life and adds a native PDF viewer.

Safari on iPhone gets competition from a $1 browser app

Apple likes to say it gives iPhone users a full browsing experience, but a new competitor tries to incorporate more desktop browser features.

Action Replay maker sues Microsoft for Xbox 360 'predatory technological barriers'

Third-party video game accessory maker Datel has filed an antitrust lawsuit against Microsoft over the Xbox 360's recent Dashboard update.

Microsoft's Bob Muglia and Ray Ozzie on Silverlight vs. standards

Bob Muglia: "We're trying to provide people with an environment that has capabilities that you just simply can't do today in the standards-based world."