| Microsoft pleasantly shocks users with no critical Vista updates |
|
|
| by Stephen Withers | |
| Friday, 04 July 2008 | |
|
Page 1 of 2 The first Windows vulnerability is specific to Vista and Server 2008. While it allows remote code execution, Microsoft at this stage has not indicated exactly why its severity rating is important rather than critical. The other allows an unspecified variety of spoofing, and affects and is rated important on all currently supported versions of Windows, with two exceptions: Vista, and the Itanium version of Server 2008. An SQL privilege elevation vulnerability is also due to be fixed. This affects SQL Server 2000 Desktop Engine in Windows 2000 and Server 2003, and the Windows Internal Database in Server 2003 and Server 2008. Itanium-based versions of each operating system are excluded. Many SQL Server products also require the update, namely SQL Server 7, SQL Server 2000, SQL Server 2005, Microsoft Data Engine (MSDE) 1.0, and MSDE 2000. The final vulnerability for July is another privilege escalation issue, this time affecting Exchange Server 2003 and 2007. But there's more than just the security bulletins, so please read on . |
| < Next story in category | Previous story in the category > |
|---|

TAG 





