Quiet September for Microsoft patches

Stephen Withers
Thursday, 13 September 2007 04:27

Your IT - Home IT

After several successive Patch Tuesdays saw the arrival of multiple critical updates, the September crop was relatively low key. Just one 'critical' vulnerability was addressed, and that was in a non-current version of Windows.

That vulnerability is in Windows 2000's Microsoft Agent software. Feeding a maliciously crafted URL to Agent may result in the execution of arbitrary code, potentially allowing an attacker to take full control of the system.

Other patches cover "important" vulnerabilities in Crystal Reports (part of Visual Studio 2002, 2003 and 2005), Services for UNIX and the Subsystem for UNIX-based Applications (Windows 2000, XP, 2003 and Vista), and in non-current versions of MSN Messenger and Windows Live Messenger.

The Malicious Software Removal Tool was also updated.

A foreshadowed security bulletin relating to SharePoint Server was not released.