Four IE bugs fixed by Patch Tuesday release

Seven updates, three critical in monthly security update.

Microsoft has released its monthly 'Patch Tuesday' security bulletin, featuring seven updates of which three are marked 'critical' and cover flaws which could allow remote execution of code if exploited on vulnerable systems.

VB100

The critical issues are with DirectX, Windows Media Format and Internet Explorer, in which four separate vulnerabilities are fixed by a cumulative update. All could be used to gain system access if a malicious file or webpage is viewed on affected systems.

The less significant vulnerabilities, all rated 'important', affect SMBv2, Message Queuing Service, the Macrovision driver and the Windows kernel.

Users are advised to ensure all security updates are applied promptly to keep their systems as safe as possible. More details of the updates are at Microsoft here.

12 December 2007

Tags: exploit, microsoft, patch, vulnerability.    del.icio.us  digg this! digg this


Poll

Should anti-virus software be free for personal use?
Yes
No
I don't know

Leave a comment
View 46 comments

Jobs Recruit Sidebar

VB100 certification

VB100 The final VB100 of the year sees a double whammy of potential pitfalls for our comparative participants - the Vista operating system, which still seems shiny and new as well as a little scary (to both developers and users), as well as the x64 architecture, whose ostensible compatibility with standard 32-bit software belies oddities and intricacies that developers ignore at their peril. The announcement of the test brought a few surprises, as several regulars opted to skip this one, but the majority of veteran competitors took part as usual, along with several newer faces, many of whom look set to join the ranks of our regulars.
See full results.

Virus Bulletin currently has 144,562 registered users.