Microsoft Readies 12 Security Patches

By Ed Oswald | Published June 8, 2006, 5:00 PM

Microsoft plans to release twelve updates as part of its monthly Patch Tuesday program, its largest since February of last year and second largest overall. Of the dozen patches, nine are intended for Windows issues, two for Office, and one for Exchange.

At least one of the Windows updates has a severity rating of "critical," as does one of the updates for Microsoft Office. The Exchange flaw has a rating of "important."

The Redmond company warned that one of the Windows bulletins would change the way Internet Explorer handles ActiveX controls, regardless of whether or not the user had applied a patch designed to give developers more time to adjust the new method.

The change was initially made back in March in response to a patent infringement case that Microsoft involved in with Eolas. However, Microsoft offered a reprieve to developers by delaying the update for two months in order to allow them to modify their applications.

As is normal with the advance notifications, Microsoft does not provide details of what vulnerabilities would be patch. However, the company is expected to offer a patch for a vulnerability within Word that has already been exploited in attacks.

While eEye Digital Security lists no flaws within Microsoft products that it considers "overdue," security firm Secunia lists several minor unpatched flaws, plus a two year old moderately critical vulnerability in Windows XP caused by malicious folder creation.

Per usual, Microsoft plans to issue an update to the Microsoft Windows Malicious Software Removal Tool. Additionally, one high-prority non-security update would be released through Windows Update, and two others through Microsoft Update, the company said.

Comments

I think WinXP SP3 is going to require a DVD :)
As long as programmers exist, their will always be a patch for us to download :)

Score: 0

|

I also look forward to updating.

New versions of the Microsoft OS and new updates used to be very risky, but in recent years they have done a much better job of checking them out.

You'd think that folks in a beta forum would be a little more adventurous and future looking. I don't do as much beta testing as I used to do, but it's always fun to get with the program and check out the latest ideas.

Score: 0

|

Maybe I'm weird, but I look forward to patches. I realize that no software is bullet-proof and the patches make me realize that they are working on it. MS releases pacthes and so do various Linux providers. I think most people on this forum are too naieve to realize how software development really works. How can a company code against attacks when the attack hasn't been invented yet? MS gets more attacks and more press due to the sheer market share.

My XP MCE 2005 runs flawlessly. In fact, it runs better than my Mandrake Linux does.

Keep the patches coming. They only make good products better.

Score: 0

|

lol... cant waite till my win xp sp 2 get even more scred up.

Just imagine when WinXP SP3 comes out.

Score: 0

|

I think it's great for a 6 years old system with only 2 SP. Even with 3, that's still much better when compare to Mac OS X, which released in 2001, and already have 4 SP, and the 5th one due end of this year.

Now, which is a better OS?

A million dollar question for ya, why you still using Windows if you so unsatisfy with it?

Score: 0

|

Only 12 huh, so if a car was released from manufacturing and had 1,230 recalls to fix everything under the sun, wouldn't that call for a class action lawsuit? I would think so, but MS only gets sued for things like unfair competition and stealing ideas and infringing patents.

Score: 0

|

Software development is nothing like any kind of physical development.

Score: 0

|

Yes, because we all know Linux is completely flawless, and impervious to any attack that has been or will be conceived.

Of course, I wouldn't buy a car from a salvage yard where the mechanics built cars by gathering up the good pre-manufactured parts (whose purpose and proper use they only half understood), and getting them to kinda sorta work together.

Score: 0

|

Your right, microsoft should not patch there OS and rewrite a new one everytime one part needs fixing.

Score: 0

|

That and building a car is SOOO Much like building software, they just have so many intricities that make them similar that comparing them is a no-brainer.

Yeah, learn what you are talking about before posting. If your logic followed, linux would not exist since they have FAR MORE security related patches out than MS ever has, you just never hear about them unless you subscribe to a list like secunia or securityfocus.

Score: 0

|

And come out with a new shinny model each year!

LOL

Score: 0

|

You spend more time bashing Microsoft than I spend correcting the inaccurate statements made by the many idiots I encounter in a day's time... something I didn't think was humanly possible. Congratulations! :)

Score: 0

|

You took the words right out of my mouth! :)

Score: 0

|

You obviously have no experience whatsoever devving software, let alone anything as complicated as a mainstream OS. When a piece of software does as many things as Windows does and has to support as many disparate and kludged pieces of junky hardware as this OS is expected to, things can and will occasionally go awry.

As an example, if the open source offerings had to do anything approaching that task (instead of the limited subset that they do support), they would be even further behind the mainstream curve than they now are. And they're still pretty far behind - the gap is currently measured in years in terms of the aggregate of ease-of-use, application maturity / fit and finish, hardware support and general user experience.

In short, it might behoove you to know at least a wee bit about what you're pontificating on before opening your mouth - to do otherwise only highlights your not inconsiderable ignorance.

Score: 0

|

Great news! Microsoft releases the mother of all patches, Linux for the pc!

Serious, how is it possible? I mean how many years has xp been out? It puts the term swiss cheese to shame. xp is like one gigantic patch now I mean really, how much even remains of the original code if you put you several thousand patches? Ok fine, its nice they are fixing their software but is it for us, or is it to cover their own rear end?

Score: 0

|

In related news, the internet becomes virtually unhabited, as 99.99999% of its users are unable to figure out how to apply the aforementioned patch; and those that could annoyed each other to death with their unwarranted ego over being able to install an operating system that can't figure out things on its own.

On a serious note regarding "is it for us, or is it to cover their own rear end".
It is in the best interests of any business to look out for the relevant interests of their customer base. If a business does not do this and there are viable alternatives, their customers will leave them quickly for those alternatives.
Conclusions:
- Microsoft provides sufficient support to products tailored to its customers
and/or
- Linux is not a viable alternative to Windows

Score: 0

|

Enough with the linux jokes already. In case you've never used linux - run yum or apt or ipkg or whichever package management program your linux uses and see how many patches there are. Odds are that if you are using a full distro like fedora or debian there are hundreds, possibly thousands of updates, unless you check frequently. 12 in a week is nothing. Granted that includes every app in your system, but some of these fixes are for office so these aren't purely OS fixes either.

Software is a constant work in progress. Just be glad Microsoft supports their software and gives you free updates, some of which include newer media players, internet explorer, movie maker, wireless tools, firewalls etc.

All these car comparisons are worthless. Cars do have bugs/flaws, you just aren't connected to the internet with millions of jerks trying to exploit them.

I am primarily an embedded linux software developer.

Score: 0

|

"XP is one giant patch"

couldn't have said it better myself!

Score: 0

|

You know, I have an original, completely secure copy of Windows 1.0 without any patches that I would gladly sell you if you prefer to run a pure, original code OS...

As to your rhetorical question about why they're releasing patches... I don't give a rats rump roast why they're doing it, so long as they do it. We benefit, and they benefit, so why are you and people like you always dragging us down for doing what it takes to be safe? Take your negativity and bashing and go pester Al Gore... it's his damn fault for inventing the Internet in the first place! :)

Score: 0

|

I installed Fedora Core 3 on a development server a year ago. In that time, not only have countless patches and fixes been released, but the Fedora team saw fit to release two completely new versions of the OS. I tried Core 4, but it hated the hardware that Core 3 ran perfectly fine on. Core 5 was released what... a few months ago now? I am going to install it over the weekend, providing the hardware is supported, lol. It's all very standard hardware too... nothing special about it. Not only that, but... I just know I'm gonna have to spend ages reconfiguring everything, because God forbid they just have a "File and Settings Transfer Wizard" or better yet have any way to auto-configure itself. I may not like a lot of Microsoft default settings, but at least they have them!

So that brings me to the question... we criticize Microsoft for taking 6-7 years to release Vista, but the alternative is to be just like the car makers cranbers compares them to... why? Do we really want Microsoft to release a brand new version every year? Or do we prefer they take time and give us truly beneficial changes?

It makes me appreciate my decision to buy Windows Vista Ultimate (when it's released)... at least if I buy the full version, I'm entitled to whatever free enhancements and bonuses they offer as part of Ultimate Updates.

Score: 0

|

Well they could just apply every miniscule enhancement and patch to the old one and sell it as new cat...er OS.

Score: 0

|

Oh gawd, another shortsighted Linux pinhead who solves all the world's software problems over a beer on Friday night at the local bar.

Why am I not even remotely surprised...

Same old tired rhtetoric.

Same old non-solutions that can't ever work in the real world because they fail to see the big picture that comprises the mainstream market.

Same old "rah-rah-rah-LINUX!" BS.

The worst crime of all: boring, boring, boring.

Score: 0

|

"- Linux is not a viable alternative to Windows "

No kidding. I've been keeping tabs on it for several years now hoping its audio and multimedia support would finally approach the general mainstream functionality that Windows achieves with impunity. It's just not there from either a hardware support or application maturity perspective (there are no fully finished easy to use and setup GoldWave, PowerDVD XP Deluxe, Paint Shop Pro or XMPlay equivalents, to name just a few). If it were, I'd already be runnig it. However I won't accept partial support for the features of my audio hardware, half-baked applications that can't approach the level of sophisitication and ease of use of their Windows counterparts.

But then again, I'm a realist who lives in the real world and not a zealot blinded by my dislike for something I don't even understand.

Score: 0

|

Ugg... that Eolas garbage. Get ready for more "what's that gray box" questions...

Score: 0

|

We've tested the eolas patch for a few months now and it's minor inconvenience that required just a heads up e-mail.

Score: 0

|

Good man, its a "heads up"

Score: 0

|

Minor? I found it downright irritating as hell. But, opinions differ.

Score: 0

|

Can Linux do BitLocker better than Windows 7?

Betanews kicks off a new series with a look at how the Linux operating system's FDE stacks up against BitLocker, the Windows feature that today commands a $120 premium.

Firefox 3.5: The need for speed

This has been the big payoff week for Mozilla's developers, who worked overtime to squeeze out the last drop of performance from their new JavaScript engine.

'GeoHot' gets a shower, cleans up nice, reveals new iPhone 3G S jailbreak

Either puberty has been very kind to the author of the new 'Purple Ra1n' jailbreak tool, or George Hotz may also have some adequate Photoshop skills.

What's Next: Obama gives 'Einstein' the go-ahead, while China gives 'Green Dam' a thumbs-down

Plus: If you put up a Web site and name it after you and you're a federal judge, you might not want a bunch of weird nudity hanging around on it.

Why would Windows 7 customers spend $120 more for BitLocker?

For pre-orders from now until July 11, Microsoft is offering the Windows 7 Professional SKU for a very steep discount. So why invest in Ultimate?

Geeks vs. journalists: A tale of two worldviews

Recovery with Angela Gunn Why geeks think most mainstream journalism is flaky, and why the mainstream thinks geeks are trying to kill them. (They're both right.)

Fire in downtown Seattle data center knocks out businesses, online services

Small fire has global impact with payment centers, city services down.

Hybrid satellite cell phones aren't far off

The first satellite in Terrestar's hybrid cellular/satellite phone network has been launched.

SMS could be a critical iPhone vulnerability, says white-hat hacker

Mac hacker Charlie Miller knows how to get into your iPhone.

Will Oracle's Java-based Fusion middleware 'fuse' with Java?

Now that Oracle has acquired Sun Microsystems, Java developers and supporters are wondering when Oracle will formally welcome Java into the family.

All together now: iPhone and Palm Pre, likely to both grace O2's UK portfolio

European wireless network operator O2 has reportedly reached a deal to exclusively carry the Palm Pre in the UK. O2,...

Vista's dead: Microsoft kills an OS and no one cares

Carmi Levy: Wide Angle Zoom Can you kill an operating system? Microsoft is about to find out.

Kantaris Media Player 0.5.7

July 3 - 5:34 PM ET

Wine 1.1.25

July 3 - 5:30 PM ET

ChrisTV Online! Free 4.00

July 3 - 5:22 PM ET

glu 1.0.19 RC1

July 3 - 5:11 PM ET

Website-Watcher 5.1.0 Beta 10

July 3 - 1:20 PM ET