One critical patch for Vista en route

By the Betanews Staff | Published January 4, 2008, 5:11 PM

Maybe they are busy prepping for CES, but Microsoft only plans to issue two patches for the first Patch Tuesday of the new year. Both patches will deal with code execution vulnerabilities in the Windows Vista operating system. One will be rated "critical," while the other received an "important" rating from the Redmond company.

The critical patch affects not only Vista, but all versions of the Windows operating system, while the important patch is also intended for Windows 2000, XP, and 2003. FrSIRT may provide some idea as to what these patches may be: it currently lists a critical buffer overflow vulnerability in Microsoft DirectX, and a "moderate risk" flaw in the Windows CFileFind class.

Comments

View comments by with a score of at least

For any of the Mac people out there, this may be an interesting read:

http://blogs.zdnet.com/security/?p=758

Score: 0

|

You can have statistics say whatever you want them to say.

All of the links off his blog are prefaced...

"NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE"

LOL. So he says it is Secunia, but Secunia has nothing to do with the reporting of the "flaws". LOL.

I did not know Flash is part of the OS:
http://secunia.com/cve_reference/CVE-2006-0024/

Also, there are many duplicates counted for Mac OSX such as:
http://secunia.com/cve_reference/CVE-2007-3005/

Another good one...
http://secunia.com/cve_reference/CVE-2007-3503/ So now he is counting Javadoc generated HTML as a flaw in the OS? LOL!

Look, Apple is far from perfect...No software is perfect. You can twist and bend numbers to say anything you want. But if you actually believe Windows is more secure than Mac OSX, then i have some ocean front property in South Dakota i can will sell you.

Read this for info on that ZDnet blog... http://www.roughlydrafte...ty-numerology-is-absurd/

Score: 0

|

I loved that article, and am mesmerized and bemused at the chart, hehe
Of course, we have to remind ourselves that the Apple zealots, or general randome variable Microsft/Windows haters, will find a fault in EVERYTHING MS does, related to computing or not.
It's ok to them when everyone else does it, but shame on MS when ms just does something normal.
http://searchsecurity.te...id14_gci1247365,00.html

Score: 0

|

It took them years to rewrite vista, from the ground up, wasn't patch Tuesday supposed to be a thing of the past? That is why the os was so delayed, at least why they claimed.

Guess they left his part of the source code out of the rewrite.

Score: 0

|

Wow, what a freaking headline, why so biased against Vista Betanews?

"One critical patch for Vista en route"

then the story

"The critical patch affects not only Vista, but all versions of the Windows operating system..."

Score: 0

|

The title says the truth straight! How else do you want to put it, you'd like to pour melt candy over it?!

Amount of patches: One
Severity: Critical
System affected: All

There, the facts!

Score: 0

|

How about "One Critical Patch for Windows en Route"?

that is more accurate

Score: 0

|

Vista is bad for games!
all games run at half speed!

Score: 0

|

half speed? you have got to be kidding me. i notice no difference in gaming performance.

Score: 0

|

You have to be kidding us all!

Score: 0

|

I agree with the positive statement. I have had no issues in migrating from XP to Vista, especially where games are concerned. There is no noticeable performance difference either in improvement or degredation.

Score: 0

|

I've heard that XP is still the prefered gaming OS.

lol - imagine in the middle of a game, you get prompted "Allow or Deny"...

Score: 0

|

I would guess any speed problems you had in games was due to poor drivers or insufficient hardware for the OS. The drivers are improving now, but you still need a good system to run it. I tried it but with only 1GB of RAM it did not run very well at all. SP1 is supposed to improve performance also I believe.

Score: 0

|

"allow or deny"...why would you need admin privledges while in the middle of a game, try harder next time, ok?

Score: 0

|

Love Vista. Not nearly as many problems with Vista as with XP or ME, 98 or 95. Just be sure you have at least 2 gigs of RAM, however. As coover stated, purchase a good book on Vista. Essential reading material for those just in case situations. I do keep the UAC turned on.

Score: 0

|

I run Vista on 5 machines and find it very good as long as UAC is turned off. 3 of the machines run 3 GB memory and the other two run 2 GB, which appears to be sufficient. I did try to run one of the machines with only 1 GB and it reminded me of an XP machine with only 256 MB, a bit slow.

Vista seems very stable, but occasionally I find that older software may not run properly on it unless properties are modified.

I recommend Vista. Be sure, however, to purchase a good book on Vista.

Score: 0

|

- I WANT TO KNOW FROM REAL USERS, NOT MEDIA -

Is Vista having less security vulnerabilities than XP by this time of their release? How much work has windows update?

Just that.

Score: 0

|

I am a security professional. And to be honest, I do find that Vista does in fact have a better track record than XP does. Not only that, but due to the internal kernel improvements, the severity of equivalent vulnerabilities is lower on average.

I'm not a Microsoft fanboy, but I am a bit of an early adapter and I find that given a machine with enough horse power (1GB RAM will be a little painful), Vista is pretty nice.

Score: 0

|

i agree, love Vista! 2gigs is a min.

Score: 0

|

Vista does Rock and is only getting better!

Score: 0

|

Every single time I've ran Microsoft Update it seems like it was either to get a Vista Ultimate Extra or to update the Windows Defender definitions.

Score: 0

|

Ditto to that!

Score: 0

|

Vista is getting better, but RAM is getting cheaper also... I hope next version of windows will focus on smaller and more efficient codewriting.

Score: 0

|

It will, for Windows 7 they have stripped the NT kernel as much as possible, I think they had it up and running with only 40mb of RAM (no graphical interface) and they're going to build upon it. They're also building a whole new Explorer shell for it from the ground up and throwing out a lot of legacy junk. I really think they're going to do a much better job with it than they did with Vista.

Score: 0

|

I am fairly certain either your talking out of your rear end or are talking about linux.

I would really like to see you cite your sources, because we all know a Microsoft employee isn't going to spout off something like that and you don't sound like someone who has special exclusive access to Microsoft's future plans when it hasn't even been released yet in any way shape or form. So how do you know what you claim to?

Score: 0

|

You do know what happens when you assume, right?

http://en.wikipedia.org/wiki/Windows_7

or if you don't like wiki you can always look through here...

http://www.google.com/se...nel+removed&spell=1

Now go back and cheerlead for Linux. Its going to take over the desktop in 2000, oh wait a min its 2008 oh well maybe this is the year!

Score: 0

|

PDC 2009: What have we learned this week?

There was the freebie that no one will forget, the heebie-jeebies courtesy of Scott Guthrie, and a teensy bit clearer picture of how this cloud thingie should work.

Live report: Will Google Chrome OS change Linux?

The mysteries of just what Chrome OS is, and how much of an operating system it truly is, may be resolved today.

PDC 2009: Microsoft cares about Web browser performance

The effort to give users of the world's dominant Web browser the impression of quality, is a personal one for the man who leads that battle.

Nokia re-affirms its commitment to Symbian, sort of

Maemo won't necessarily be replacing Symbian in the Nokia N-Series, but that's definitely a place where it will be found.

E-book readers will be in short supply this holiday season

E-readers are hot this year, and a lot of compelling new products have been released, but are there enough electrophoretic displays to go around?

Sony looks to finally open a single storefront for downloads

Sony has had many different download portals for movies, music, e-books, and games, and now it's looking to make a single shop for all of it.

Tuning out the tablet: Time to give the endless speculation a rest

Wide Angle Zoom: Wishing and hoping and thinking and praying....won't put an iTablet on the market.

Five improvements for IT managers in 2010

If businesses are to improve their efficiency for next year, they need to stop and reassess the basic tenets of their job.

AOL's spinoff from Time Warner to shed 2,500 jobs

As AOL moves toward become an independent company again, it will cut nearly a third of its workforce.

Gartner: SMS-based money transfer will be bigger than mobile browsing, search

Gartner issues its predictions for the 10 things our phones will be doing in 2012.

Don't forget to upgrade to Firefox 3.6 beta 3 today

Mozilla has released the latest beta its Firefox 3.6 browser software, just over one week after beta 2.