Wednesday, June 14, 2006

12 Microsoft Security Patches Released

Yesterday, like every second Tuesday of each
month, Microsoft published a set of security bulletins and patches which
it has rated as "Critical", "Important", and "Moderate".

The critical bulletins are those from MS06-021 to MS06-28. The content
of these bulletins is the following:

- Cumulative security update for Internet Explorer, which resolves eight
newly discovered vulnerabilities in the Microsoft browser.
- Fixed a vulnerability in ART Image Rendering for Windows Server 2003,
XP, 98 and Millennium Edition.
- Fixed a vulnerability in Microsoft Jscript, affecting Windows 2000,
Server 2003, XP, 98 and ME.
- Security update for Microsoft Windows Media Player. For Windows Media
Player 9, 10 and Windows Media Player for Windows XP.
- Fixed two vulnerabilities in the Routing and Remote Access service in
Windows 2000, Server 2003 and XP.
- Security update for the graphics rendering engine in Windows 2000,
Server 2003 and XP.
- Fixed a vulnerability regarding remote code execution in Microsoft
Word versions 2000, 2002 and 2003.
- Fixed a vulnerability regarding remote code execution in PowerPoint
versions 2000, 2002 y 2003.

Microsoft rates as "Important" bulletins MS06-029, MS06-030 and
MS06-032:

- Security update for Microsoft Exchange Server running Outlook Web
Access for Exchange 2000 and Server 2003.
- Fixed two vulnerabilities in Server Message Block (SMB) for Windows
2000, Server 2003 and XP.
- Security update for a vulnerability in TCP/IP in Windows 2000, Server
2003 and XP.

Finally, bulletin MS06-031 is categorized as "Moderate"

- Fixed a vulnerability in the Windows 2000 RPC service that could allow
spoofing

We can't underline enough the seriousness of these problems, and reminds users
that they should install the updates as soon as possible. In this case,
it is particularly important, because by allowing programs to be
installed, these vulnerabilities are the perfect scenario for falling
victim to new malware dedicated to cyber-crime.

You can find all the information about these bulletins at:
http://www.microsoft.com/technet/security/bulletin/ms06-may.mspx