July 05, 2007

Microsoft to release six security updates next week

The updates will include three 'critical' patches for Windows and Excel

Microsoft will release six groups of security patches next week, including three critical updates for Windows and Excel users.

The critical updates will fix bugs in many different versions of Microsoft's products, including the latest versions of Excel, Windows XP, Vista, and Windows Server 2003, Microsoft said Thursday in a note on its Web site.

Online criminals have used flaws in Excel and other Microsoft Office products in limited attacks over the past year. Typically, the attacker will e-mail the victim a maliciously encoded Office attachment. If the document is opened, the hacker can then gain access to the victim's computer.

Microsoft isn't releasing further details on the flaws it's fixing until Tuesday, but it rates an update critical if it fixes a vulnerability that could be used by a hacker to remotely install unauthorized software on a victim's computer.

Three other less-critical updates are also planned for next week's "Patch Tuesday" security fixes.

They include "important" updates for Microsoft Publisher 2007 and Windows XP Service Pack 2 as well as a fix for Windows Vista.

In descending order of severity, Microsoft rates updates as critical, important, moderate, or low.

Sign up to receive Security Resource Alerts

Subscribe to the Security Central Newsletter

The one-stop resource center for IT professionals.

White Paper

CA Security Management Solutions

A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.

Download now! »

White paper

Beyond Compliance: The Significant Benefits of Log Management

Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.

Download now! »

Webcast

Integrated Identity Compliance: Enabling Cost-Effective Role-Based Compliance

This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.

View now! »
©1994-2009 Infoworld, Inc.