Microsoft to Issue 11 Security Patches

By Nate Mook | Published October 5, 2006, 2:45 PM

On October 10, Microsoft will issue 11 security bulletins as part of this month's Patch Tuesday. Six of the updates affect Windows, with the highest severity being "critical." Another four patches will cover Microsoft Office, also with critical severity, while a moderate fix is slated for the .NET Framework.

Among the fixes will likely be a patch for the WebViewFolderIcon ActiveX control, which is part of the Windows Shell. An exploit has surfaced for a vulnerability in the control that could result in an attacker gaining the same user rights as a local user. Unlike with the VML fix, Microsoft has waited to patch the WebViewFolderIcon flaw, saying it was unaware of any actual attacks taking place.

Comments

View comments by with a score of at least

When SP2 came out, all I heard was that it was the big one that could not be hacked through. SP2 was said to be the single most important thing that makes a computer safe and unbreakable. That if a pc had SP2....that's all ya need.

what complete bs.......

Score: 0

|

And if you believe that about any patch for any product, you dont deserve to be using a computer.

Score: 0

|

No one ever said SP2 would be impregnable, but rather it would be a landmark improvement. And it was.

Microsoft has done a lot of things that deserve criticism without you digging into the realm of making things up.

Score: 0

|

August 2004 is when sp2 was released, I thought a service pack was supposed to be nothing more then updates rolled up into a single pack for integration into the install cd as well as ease of use so you don't have to download 100's? of hotfixes soon. 2 service packs in 5 years is a little rediculous I mean how many did nt4 have? 6 in as many years. What about windows 2000, that had 5 didn't in less then 5 years. so WTF?

Score: 0

|

If you have a fresh install of xp say from initial 2001 release god help you if you don't have broadband and a lot of people don't. Heck a lot of xp users don't even know what it is let alone why its necessary. If a update is downloading and the computer won't shut off they hit the power button.

Even since sp2 it's insane the number of patches talking about a hundred megabytes with more being added every 30 days. xp needs to be barred from existence with free vista upgrades to anyone who bought a copy of xp. Who knew operating a computer came with a free ticket to patches for an unlimited amount of holes. It's ridiculous and microsoft should be ashamed of itself.

Score: 0

|

cranbers, vista will be NO different. Trust me hackers have probably already started to dig through the code of that OS and find holes in it's security also. MS's security is a joke and when they say Vista is more secure i take that with a grain of salt.

Score: 0

|

This is part of my point in NOT updating.

Score: 0

|

I wonder How long until they make all these into another service pack. It would be easier for us all...

Score: 0

|

I recently did a fresh install of XP SP2. It required a total of 61 patches, 99MB over 3 Microsoft Update sessions to get it up to date. While I don't think a service pack is forthcoming soon, an update rollup would really make life easier, especially if you don't have a broadband connnection.

Score: 0

|

rbailin, download nLite and create your own installation disk. I downloaded all the patches/updates and add them to the nLite build, then when new patches arrive I just update the nLite build with the new patches. Use DVD-RW so you don't waste disks. It also lets you do a fully automated installation so you can start the install and have no need for input during the install.

Score: 0

|

the sad thing is you install xp often enough where it is a big deal. The best thing you can do is install it, update it and get everything just how you like then use norton ghost or some other backup imaging software and you are good to go. Not to mention it will be much faster when you need to reload the image. Your talking 20 mins from start to finish not 30 mins to install xp, 20 mins to update 30 mins to install all new drivers and applications then update the applications like office etc.

Score: 0

|

I wonder how long it will take before we get the first critical security patch for Windows Vista.

Score: 0

|

probebly not long.. =)

but then again, you never really know.

Score: 0

|

the sad thing I think between beta 2 and rc1 of vista there were already several security updates. I don't think we have seen the end of vulnerabilities not with vista anyway. I remember people saying that vista will bring the end of patch tuesday for microsoft and the unlimited number of security holes.

Score: 0

|

.NET needs patching ... surely not.

Score: 0

|

So all you fanboy flamers that posted bias on the MacOSX patch story are hiding today? Typical. Talk sh*t and hide.

BTW: I could care less about what you fanboys post since you have shown that you know absolutely nothing.

Have a nice frustrating life, haters.

Score: 0

|

I think most of the replies in the other thread was more gear towards Apple's superiority complex, and that of it's users(generaly speaking). I think most of them were just trying to say that OSX is no better no worst then the rest of the OS out-there.

Though some of them were just trying to get some outburst, and by the looks of it they pulled it off.

I don't think anyone said Windows was better then OSX, and those who use Windows know all to well the problems with the OS, and the needs for patches. It was more: "At least MS will admit there is a problem, and fix it. Rather then deny, deny, deny, and then fix it and hope no-one notices, and then still deny it afterwards."

So please don't assume every who postd in the thread as being haters. I work on both OSX, and Windows, I know the ups, and downs of both OS. They have their strong points, they have their weak points. At the end of the day, it all comes down on the user.

Can we all just maybe agree that if theres a stupid user, it doesn't matter what OS you use, you'll still be screwed. =)

Score: 0

|

Uh, the posts in the OSX story didn't have anything to do with MS bugs and all to do with OSX users proclaiming how impervious they are.

Quite hypocritical to turn red in the face and blow your top and then call others haters.

Talk sh*t and hide? You posted 30 minutes after the news was posted...."the haters" supposed to be hovering over the refresh button?

"I could care less about what you fanboys post" .... uhm, you obviously do care...more than anyone else apparently.

Score: 0

|

You post less than half an hour after the story gets posted and start screaming where are all the posters. For someone who doesn't care you sure do have your panties in twist about it (by the way it's "couldn't care less". When you say could care less, it means you care.

Score: 0

|

That was a the typo bug, security advisory mac440392 level critical, in his Mac keyboard.

Score: 0

|

...

Score: 0

|

I can't belive all you morons haven't actually heard someone use the phrase "I could care less." Similar intent, but different meaning to the phrase "I couldn't care less."

I daresay if he couldn't care less he either wouldn't be posting or would be wildly fanatical about the issue. Take some time to think about that one. :P

Score: 0

|

In his defence - how many Apple viruses are there?

Score: 0

|

Pick your vulnerability....

http://www.securemac.com/

Score: 0

|

The post has nothing to do with how many there are.

Score: 0

|

In the UK, it's definitely 'I couldn't care less.' I've seen 'I could care less' used by a US citizen. The UK meaning is 'my ability to care is at an absolute minimum.' The US meaning, if it's not just a misuse, seems to be ironic.

Score: 0

|

"Can we all just maybe agree that if theres a stupid user, it doesn't matter what OS you use, you'll still be screwed."

Amen to that! Can't we all just get along!

Oh wait, what would be the fun in that :)

Score: 0

|

oh it's a misuse, and other americans use it all the time. morons really.

Score: 0

|

see the point is, apple users claim they have no vulnerabilities, and everything workse great. Microsoft users make know such claim, and inherently know that there will always be new bugs and problems. The point is Microsoft Windows and Office users freely admit it, Apple OS users simply hold their hands over their ears and mutter, "hear no evil" over and over again.*

*Note that is meaning generally, not all Apple users do that, and not all Microsoft users do that either, it is just a simple majority.

Score: 0

|

In Our defense*, how many Apple users are there compared to Microsoft users?

Score: 0

|

"apple users claim they have no vulnerabilities"

They do no such thing. Either the only OS X users you've ever come into contact with are inarticulate idiots, or you purposefully misunderstand what they're saying.

OS X does not have any malware (viruses, spyware) exploits. The OS is locked down in that regard. That does not mean there aren't any system exploits to be taken advantage of: they clearly exist, and they get patched almost immediately when discovered. So far, OS X has proven itself to be safe to use. Sure, that might change if it were as scrutinized as Windows, but the plain fact is that it isn't.

The fact is that today, right now, you can load up a Mac and do pretty much whatever you want on it, and you'll be safe from the horde of crap out there in the Interweb. That could eventually change, but after five years, it's not looking extremely likely.

Score: 0

|

Latest Firefox 3.6 beta fixes 133 bugs, promises faster page load times

A once-sluggish beta testing process has kicked into overdrive, with astonishing success at finding serious bugs. Will Mozilla be able to fix all the others in time?

Apple invokes DMCA, claims Psystar is 'trafficking in circumvention devices'

In trying to close the book on possibly the last attempt at a Mac clone, Apple cites from its own landmark case...but may actually be misinterpreting it.

The fallacy of Facebook privacy

Carmi Levy | Wide Angle Zoom: If an insurance company learns something interesting about its client through the Internet, is that snooping?

Microsoft 'worked with Apple' for Silverlight on iPhone, says Goldfarb

By not making such a big deal out of trying to stream video to the iPhone, Microsoft got a big deal out of it, revealed the Silverlight product manager.

Confirmed: Office 2010 to ship in June

Two weeks after Microsoft had been expected to draw a clearer roadmap for its principal applications suite, it's finally ready to commit to the end of H1.

New EU antitrust commissioner will oversee Microsoft, Oracle+Sun, Intel issues

As one of Europe's most prominent politicians shifts positions in January, her replacement remains a question mark over technology's biggest issues.

Without its own 'iTablet' yet, is Apple missing the boat?

Steve Jobs is on record as dissing "single-purpose" devices like e-readers. But given their recent popularity, was that a mistake?

Not-so-mobile battery life: Time to force the issue

Carmi Levy | Wide Angle Zoom: If power efficiency is important when you buy a car or even a motorcycle, why shouldn't it matter for a smartphone?

Clicker.com cuts through the Web video chaos

In a world where homemade video and Hollywood movies travel the same pipeline, it's good to have a real search engine to cut through the clutter.

Microsoft's Ray Ozzie: 'Nobody's going to be 100% open'

The mobile apps ecosystems of the world may converge over time, led by apps being ported over across platforms, according to the Chief Software Architect.

A case study in improving software: What Office 2010 can learn from Notion 3

A music composition product gambles with a complete overhaul, in an effort to make headway against two well-known competitors in a tough market.