Microsoft to Issue 7 Security Patches

By Nate Mook | Published July 6, 2006, 2:30 PM

Microsoft plans to release 7 security bulletins as part of its July 11 Patch Tuesday, the company said Thursday. Four of the updates are for Windows, with the most severe being rated as "critical." Three other patches are directed at Office, also with a maximum severity of "critical."

Although Microsoft does not disclose in advance what flaws are to be patched, two vulnerabilities in Excel are likely to be among the fixes. One issue relates to maliciously crafted spreadsheet files that could lead to a full system compromise, while the other relates to hyperlinks in Excel documents.

Two security flaws affecting Internet Explorer were also reported last week, including a cross-site scripting issue where an attacker could view information in an open browser window from another that is visiting a malicious site.

A second more serious flaw involves how HTA applications are handled. A user could be tricked into opening a malicious file, which in turn could execute code. The file would need to be accessed through SMB or WebDAV in order for the issue to be exploited.

Microsoft said last week that it was investigating the issues, but it's not clear if the company has had time to develop and properly test a fix.

Along with the 7 security patches, Microsoft will release one high-priority non-security update that is not for Windows. Per usual, the Redmond company will also deliver an update to its Malicious Software Removal Tool on Tuesday.

Comments

View comments by with a score of at least

I've downloaded IE 7 Beta and now can not use IExplorer at all. Is is just me and my computer? Using XP Home Edition w/ sp2.
HELP!!!!!!!!!!

Score: 0

|

IE7 Beta is not a new program, it is a new version of an existing program, and thus when you install it, it replaces your old version (IE6) with itself
so you are still using the same product, it is still Internet Explorer, the difference is the version number

if the program wont run at all, try reinstalling it, or uninstalling and then doing a fresh install

Score: 0

|

Hi Ho....Hi Ho....off to patch we go

Score: 0

|

Hey!!!!!!!!!!!!!!!!!!!!!!!!!Don't be talking 'bout my sistah!!!!!!!

Score: 0

|

ANOTHER SWISS CHEESE TUESDAY!

Score: 0

|

I cannot imagine Microsoft without "critical patches". Well, I think there's always something to be made better. Some years ago I had to return to my old computer with Windows 98 SE in it. I keep using it since then. I have improved it in many ways (new motherboard, new hard drive, new processor, firewall, editors, registry cleaners, DVD, TV, Satellite receiver, tweaks, etc.) I never loaded a patch. If you are a Windows 98 SE user, don't worry: It is a really cool system and keeps working perfectly. You may find almost everything you need to improve it up to very high standards in the Internet, no need to buy a new machine.

Score: 0

|

And THAT is the last official day of any patch being released for win9x.

Those of you wanting future patches, and as well previous unofficial patches(by anonymous MS insiders) for the issues MS has stated it will not patch on 9X, check out either mdgx.com under your particular OS, or here: http://www.msfn.org/boar...dex.php?showtopic=46581

Score: 0

|

You won't be able to get future patches at that site because there won't be any future patches. All of those "unofficial service packs" and hot fixes are made by Microsoft. People just bundle them together into packs.

Score: 0

|

The critical one must be a WGA update.

*grin*

Score: 0

|

Oh gosh...

Is that an angry mob I see coming up the road?

lol

Score: 0

|

Grab yer Torch and Pitchforks!

Score: 0

|

and in the morning, I'm make-in WAFFLES.

Score: 0

|

Don't forget the rope!

Score: 0

|

Someone got it. ;)

Score: 0

|

A real beta process at work: Mozilla fires up Firefox 3.6 Beta 2

In the clearest sign yet that public input really does help the development process, a flurry of bug detections provoked Mozilla to release Beta 2 of the next Firefox.

Snow Leopard and Windows 7 still can't crack the netbook problem

Apple has killed Atom support in OS X 10.6.2 and Windows 7 Starter Edition is stripped of "basic" functionality.

Microsoft's Top 3 advances in Exchange Server 2010

The latest round of changes launched today will impact how admins deliver services to e-mail recipients, and how much companies will pay along the way.

Firefox turns five: Thanks for giving us a choice

Carmi Levy | Wide Angle Zoom: No longer the phoenix rising from the ashes, Mozilla has carried on more than just Netscape's legacy.

Kindle for PC opens in beta, underwhelms

Amazon has opened the beta of Kindle for PC, a companion to the Kindle, but little else.

European ministers approve watered-down 'neutral net' language

The latest provision in the EU's telecoms regulatory framework would let businesses cancel individuals' Internet access, if they go to court first.

It's the US vs. the EU over Oracle+Sun and the meaning of 'open source'

Now that the EU is a virtual country, the US Justice Dept. is taking a stand in favor of its view -- and against the EC's -- that MySQL will survive under Oracle.

Qualcomm: $1.3 billion Samsung licensing deal unrelated to fair trade violations

Samsung has come to a 15-year licensing deal with Qualcomm over 3G and 4G wireless technology.

Nokia's 'limited number' of recalled chargers exceeds 14 million

Today, the Finnish phone maker has begun a recall of mobile phone chargers that are a shock hazard.

Ubuntu 9.10 upgraders report frustration

For those Wine aficionados out there, beware of the remote possibility that your Linux system could be infected by Windows-seeking malware.

Supreme Court considers patentability of abstract methods today

Can software that executes a formula for a business process qualify for federal patents? An appeals court already said no, and inventors are making their case.