Digital Home Advisor

Four Microsoft security patches due next week

Microsoft plans to patch its security software, Word, Publisher and its Jet database engine next Tuesday

Robert McMillan (IDG News Service) 09/05/2008 09:27:16

More by Robert McMillan

iPhone Centre

Find out all about the iPhone at our iPhone Centre. News, reviews, how-tos and video - all in one location.

+

Clever iPhone tricks 08/08/2008 09:18:27
Did you know you can dictate e-mail messages to your iPhone? That's just one of the tricks up our sleeves.

I'm now the owner of an Apple iPhone 3G, after waiting out the first-generation model.
+

iPhone hackers go too far, get shut down by Apple 07/08/2008 10:51:17

I was all set to give this week's column over to a new register-direct implementation of a JavaScript interpreter that's many times faster than all currently available implementations. It's not exactly growing hair on a billiard ball, but a nitro-boosted JavaScript will put a shine on AJAX and keep my most beloved language on track to becoming the gold standard for dynamic languages.
+

Jobs shakes up Apple management over MobileMe debacle 07/08/2008 08:29:09

Apple CEO Steve Jobs has given MobileMe to the executive who heads iTunes, part of a shake-up over the sync service's public problems since its launch last month, according to a memo sent to company employees earlier this week.

More >

Additional Resources

Newsletter Subscription

GoodGearGuide GearDaily Newsletter [Daily]

Each day the GearDaily Newsletter covers the latest from the last week in a specific category. Monday is "Computing, Small Office and Home Office", Tuesday is "On the Move", Wednesday is "Digital Cameras, Video and Imaging", Thursday is "Mobile Phones and Communications" and Friday is "Home Entertainment".

GoodGearGuide GearShop Newsletter [Weekly]

See the latest products and comparison prices added to GearShop each week.

GoodGearGuide Pre-Register

The GoodGearGuide portfolio of services is rapidly expanding. By joining this list you will be pre-registered for any new email services we launch so you won't miss out on any of our independent product guidance and purchasing information. You will be automatically subscribed and receive the new service(s) but dont worry, should you wish to unsubscribe you can do so with only one click.

Microsoft plans to fix critical bugs in its Word, Publisher and Jet database software next week.

The software vendor also plans to release a less-critical update for its antivirus products, fixing a flaw that attackers could use to launch a denial of service (DoS) attack against products such as Windows Live OneCare and Microsoft Forefront Security.

The updates will be released Tuesday, the day set aside for Microsoft's monthly set of security patches. Microsoft provided some early details on the patches Thursday, in a note on its Web site.

Microsoft considers flaws to be critical when they could be exploited by attackers in order to run unauthorized software on a victim's system.

Although Microsoft's note does not describe the bugs in detail, it looks like the company is planning to fix a known bug in the Jet database engine, which was disclosed in late March. Attackers had figured out a new way to launch a malicious Jet file using Microsoft Word, Microsoft warned in a blog posting.

Jet files, which have a .mdb extension, are typically blocked by Outlook, but "attackers have figured out a way to work around the mitigations built into Outlook," Microsoft said in its post.

The Jet flaw affects Windows XP, 2000 and Server 2003 Service Pack 1.

The Word flaw is rated critical for both Windows and Mac users.

Although rated only "moderate," the DoS bug in Microsoft's security products is also a cause for concern. It affects many Microsoft security products including OneCare, Antigen, Windows Defender, Standalone System Sweeper and several Forefront Security products.

Market Place