Technology news and Jobs 
Information Technology News Two Vista bugs and 13 others squashed by June Patch Tuesday
Information Technology News Two Vista bugs and 13 others squashed by June Patch Tuesday | Two Vista bugs and 13 others squashed by June Patch Tuesday |
|
| by Stephen Withers | |
| Wednesday, 13 June 2007 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
The other critical issues affect Windows' Secure Channel (Schannel) package, Internet Explorer, Outlook Express and an unspecified aspect of the Win32 API. All potentially allow remote code execution. Schannel provides SSL and TLS authentication. Microsoft states that an attempt to exploit this vulnerability would most likely cause the browser or other application to quit. The Internet Explorer issues affect versions 5 through 7, and five of them could permit remote code execution when exploited by maliciously crafted web pages. The other could allow spoofing. Interestingly, the Outlook Express vulnerabilities cannot be directly exploited from within that program. Instead, information may be disclosed when a maliciously crafted web page is displayed in Internet Explorer. The only 'important' bulletin covers an unspecified number of remote code execution flaws in Visio that can be triggered by opening maliciously crafted files. Remote code execution issues normally attract a critical rating, but this bulletin is apparently rated important as user action is needed for successful exploitation. A new version of the Windows Genuine Advantage Validation Tool must be installed before the other updates can be downloaded via Microsoft Update. Microsoft also re-released two previous bulletins covering issues with MFC and CMS. The revised MS07-012 bulletin includes Windows Server 2003 SP2 in the list of affected products, and the update associated with MS07-018 has been updated to accommodate copies of CMS 2002 installed in non-standard locations. Other updates released in tandem by Microsoft include new versions of the Outlook Junk Email Filter and the Windows Malicious Software Removal Tool.{moscomment} |
Tags
| < Next story in category | Previous story in the category > |
|---|
