Microsoft issued its largest batch of updates in 18 months. I thought the Windows XP SP3 and Windows Vista SP1 update packs were big, but yesterday Microsoft released at least 14 updates for various Windows and Microsoft Office products. Included among the fixes were the Word 2002 “zero-day” bug I reported on July 11, 2008, and the Microsoft Access Snapshot Viewer flaw that I reported on July 8, 2008.
The patches released included:
- Microsoft Access Snapshot Viewer vulnerability (Important for business and professional users)
- Microsoft Office Word 2002 vulnerability
- 2 x Windows Vista security patch
- Microsoft Office Excel 2007 security patch
- Daylight Savings Time revisions for Windows Vista
- Malicious Software Removal tool (A monthly fix from Microsoft)
- Microsoft Office 2007 security patch
- Internet Explorer 7 security patch
- Microsoft Office PowerPoint 2007 security patch
- Windows Mail Junk E-mail (Spam) filter update
- 2 x Windows Vista updates
- Windows Vista ActiveX security update
- Windows Mail security update for Vista
- Microsoft Office Outlook 2007 security update
Most of these patches affect business users, as most home users with a computer over a year old don’t have Windows Vista or Microsoft Office 2007. Also, if the programs mentioned aren’t familiar to you, then they most likely aren’t a risk.
If you aren’t up to date on your Windows Updates you can always go to http://update.microsoft.com for the lastest fixes from Microsoft. They are made available for free download and installation every Tuesday evening.
Check out Skylark NetWorks weekly Apple versus Microsoft Weekly Vulnerability Index compiled from the SANS Institute for past patches.
If anyone has a question, please email them to me using the Contact link, or, if it relates to today’s message, please use the Comment and Question link below. I’m looking forward to hearing from you.