Microsoft fixes IE, Office in big month of security updates

Microsoft has released patches to fix 19 critical holes in its software Tuesday, including five flaws in IE that should be patched immediately.

Microsoft released patches to fix 19 critical vulnerabilities in its software Tuesday, including five flaws in its Internet Explorer browser that security experts advise IT administrators to patch immediately.

The total of 11 security updates released for August is the largest round of Patch Tuesday updates Microsoft has released since last February and should give IT administrators plenty to do to secure their companies' systems. "People are going to be quite busy with this load," said Jason Miller, security data team leader for Shavlik Technologies, a patch-management software provider in St. Paul, Minnesota.

Six of the patches, which can be found on Microsoft's Web site, are rated as critical, while five are rated as important.

Miller and other security experts cited Microsoft Security Bulletin MS08-045, a Cumulative Security Update for Internet Explorer, as the top priority among this month's batch of updates. The update patches five privately reported vulnerabilities and one that already has been disclosed publicly and for which attack code already exists, which makes it a zero-day flaw.

Don Leatham, director of solutions and strategy for Lumension Security, said the fact that the IE vulnerabilities affect HTML (Hypertext Markup Language) is enough reason to make patching them of the utmost importance, since the opportunity for exploitation is so vast. "Every Web site in the world uses HTML," he said. Lumension, based in Scottsdale, Arizona, provides patch- and vulnerability-management software and services

Shavlik's Miller said that the IE patches and another critical update released Tuesday that fixes a vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access -- MS08-041 -- are related because they both allow an attacker to create a Web site that takes advantage of these vulnerabilities. He listed them both as priorities for immediate installation.

Leatham also cited the Snapshot Viewer exploit as a high priority for IT administrators because many businesses use Access and its Snapshot Viewer tool extensively.

"You can be assured people are using the viewer to share information with partners, customers and internally given the popularity of the Office suite and how much businesses tend to use Access," he said.

An update that fixes a vulnerability in the Microsoft Windows Image Color Management System -- MS08-046 -- also should be installed immediately because it could allow an attack if a user navigates to a Web page and views a particular graphic, researchers said. The color-management system is part of the graphical subsystem of Windows.

"Given that [the vulnerability] is Web-based and graphical, you definitely want to pay some special attention to that one," Leatham said.

Two August updates rated as important also should be of interest to IT professionals, even if Microsoft has rated them below the critical updates. They are MS08-047, which fixes a vulnerability in IPsec Policy processing, and MS08-50, which patches a flaw in Messenger.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Elizabeth Montalbano

IDG News Service
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?