Microsoft to Issue 7 Security Patches

By Nate Mook, BetaNews

July 6, 2006, 2:30 PM

Microsoft plans to release 7 security bulletins as part of its July 11 Patch Tuesday, the company said Thursday. Four of the updates are for Windows, with the most severe being rated as "critical." Three other patches are directed at Office, also with a maximum severity of "critical."

Although Microsoft does not disclose in advance what flaws are to be patched, two vulnerabilities in Excel are likely to be among the fixes. One issue relates to maliciously crafted spreadsheet files that could lead to a full system compromise, while the other relates to hyperlinks in Excel documents.

Two security flaws affecting Internet Explorer were also reported last week, including a cross-site scripting issue where an attacker could view information in an open browser window from another that is visiting a malicious site.

A second more serious flaw involves how HTA applications are handled. A user could be tricked into opening a malicious file, which in turn could execute code. The file would need to be accessed through SMB or WebDAV in order for the issue to be exploited.

Microsoft said last week that it was investigating the issues, but it's not clear if the company has had time to develop and properly test a fix.

Along with the 7 security patches, Microsoft will release one high-priority non-security update that is not for Windows. Per usual, the Redmond company will also deliver an update to its Malicious Software Removal Tool on Tuesday.

Add a Comment (15 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

Name (required):

E-mail (required):

Enter Your Comment:

By tobbysage

edited Nov 20, 2006 - 11:37 PM

I am having a lot of problems with flash player. When I contacted the flash player people they told me that the flash player is not compadable with I E 7 and that they know of no work around or patch, however they assured me they were working on it, is I E doing anything about this problem? I am getting really tired of unenstalling the player and reloading it to only use it that one time. Has anyone elce had this problem and if so were you able to fix it and how?

Score: 0

By EdyEL

edited Jul 10, 2006 - 12:20 PM

I've downloaded IE 7 Beta and now can not use IExplorer at all. Is is just me and my computer? Using XP Home Edition w/ sp2.
HELP!!!!!!!!!!

Score: 0

By NyNe

edited Jul 10, 2006 - 1:34 PM

IE7 Beta is not a new program, it is a new version of an existing program, and thus when you install it, it replaces your old version (IE6) with itself
so you are still using the same product, it is still Internet Explorer, the difference is the version number

if the program wont run at all, try reinstalling it, or uninstalling and then doing a fresh install

Score: 0

By crashoverride

posted Jul 7, 2006 - 5:04 PM

Hi Ho....Hi Ho....off to patch we go

Score: 0

By horsecharles

edited Jul 7, 2006 - 7:24 PM

Hey!!!!!!!!!!!!!!!!!!!!!!!!!Don't be talking 'bout my sistah!!!!!!!

Score: 0

By GCoder

posted Jul 7, 2006 - 10:21 AM

ANOTHER SWISS CHEESE TUESDAY!

Score: 0

By cannie

posted Jul 7, 2006 - 4:38 AM

I cannot imagine Microsoft without "critical patches". Well, I think there's always something to be made better. Some years ago I had to return to my old computer with Windows 98 SE in it. I keep using it since then. I have improved it in many ways (new motherboard, new hard drive, new processor, firewall, editors, registry cleaners, DVD, TV, Satellite receiver, tweaks, etc.) I never loaded a patch. If you are a Windows 98 SE user, don't worry: It is a really cool system and keeps working perfectly. You may find almost everything you need to improve it up to very high standards in the Internet, no need to buy a new machine.

Score: 0

By horsecharles

posted Jul 6, 2006 - 11:39 PM

And THAT is the last official day of any patch being released for win9x.

Those of you wanting future patches, and as well previous unofficial patches(by anonymous MS insiders) for the issues MS has stated it will not patch on 9X, check out either mdgx.com under your particular OS, or here: http://www.msfn.org/boar...dex.php?showtopic=46581

Score: 0

By Banquo

posted Jul 8, 2006 - 12:36 AM

You won't be able to get future patches at that site because there won't be any future patches. All of those "unofficial service packs" and hot fixes are made by Microsoft. People just bundle them together into packs.

Score: 0

By PC_Tool

posted Jul 6, 2006 - 5:23 PM

The critical one must be a WGA update.

*grin*

Score: 0

By wincement

posted Jul 6, 2006 - 5:40 PM

Oh gosh...

Is that an angry mob I see coming up the road?

lol

Score: 0

By PC_Tool

posted Jul 6, 2006 - 6:03 PM

Grab yer Torch and Pitchforks!

Score: 0

By crashoverride

posted Jul 6, 2006 - 7:28 PM

Don't forget the rope!

Score: 0

By fewt

posted Jul 6, 2006 - 7:28 PM

and in the morning, I'm make-in WAFFLES.

Score: 0

By PC_Tool

posted Jul 6, 2006 - 8:28 PM

Someone got it. ;)

Score: 0