 |
|
|
In its latest security Tuesday patch, Microsoft released
security updates for 15 vulnerabilities in Windows, Internet Explorer, Windows
Vista and other bundled products.
Nine of those fifteen update are rated by the Redmond company as “critical”
which means that attackers can exploit the security breaches without user
interaction.
Internet Explorer is the most patched Microsoft application
in the June release. The browser received six plugs, five of which will repair
'critical' vulnerabilities.
Symantec's researchers also urged users to plug the holes in
IE quickly. "[We] rate the vulnerabilities in Internet Explorer as the
most critical since two affect Internet Explorer 7 on Windows Vista," the
company's response team said in an e-mailed alert.
Other two critical “flaws” affect the Mail application
bundled with Windows Vista and could be exploited when a user opens a specially
crafted message. The other one affects
the Secure Channel Windows component that implements the Secure Sockets Layer
and Transport Layer Security internet standards in Windows XP.
The final 'critical' vulnerability is in an undisclosed
component of the Win32 application programming interface.
But the latest Microsoft’s patch is a premiere because is
the first time when the Redmond
company issues a patch only for Windows Vista, its latest OS.
Microsoft Security Bulletin MS07-032, rated as Moderate, resolves
a privately reported vulnerability. This vulnerability could allow
non-privileged users to access local user information data stores including
administrative passwords contained within the registry and local file system.
© 2007 - 2009 - eFluxMedia