Windows gets big security update

[jameseuk]

One of the biggest security updates for more than a year is being released by Microsoft to fix 12 software flaws.

Nine of the updates apply to the Windows operating system and one is deemed critical, a rating reserved for the most serious security problems.

At least one of the loopholes being patched is already being actively exploited by malicious hackers.

Windows users are being urged to download the patches as soon as they become available on Tuesday 13 June.

Support shift

Microsoft issues its security patches on the second Tuesday of every month and June's update will be the biggest for more than a year.

This is because Microsoft is not only tackling security problems but also the fallout of a legal case that the software giant lost.

Microsoft gives advance notice of what is in its security patches to help companies plan how best to install the software and limit the impact on day-to-day business.

While most of the updates apply to Windows, two are for the Office suite of products and one for the Exchange e-mail server software.

One of the security problems being tackled in Office was found in Microsoft's Word software and the virus created to exploit it has been dubbed Backdoor.Ginwui. The virus and loophole were first discovered in mid-May.

The virus travels in an e-mail bearing a Word document that purports to summarise the results of a US-Asia summit.

Legal woes

Another of the updates has come about as a result of a courtroom clash between Microsoft and Eolas over technology in the Internet Explorer browser. The lawsuit ended with a $521m (?283m) judgement against Microsoft.

Microsoft had to re-engineer Internet Explorer to stop a technology known as ActiveX automatically starting when users visit some websites.

Before now, users could choose to apply this change to their browser, but this update makes it mandatory.

At the same time as information about the update was being released, Microsoft mentioned that it will not be able to patch Windows 98 and ME against a loophole discovered in April 2006.

Fixing this bug in the ageing software would require a major re-write of the Windows Explorer program used in these old copies of the operating system.

Microsoft is not prepared to undertake this work, given that all support for Windows 98 and ME ends on 11 July 2006.

On its security blog Microsoft wrote: "We strongly recommend that those of you who are still running these older versions of Windows upgrade to a newer, more secure version, such as Windows XP SP2, as soon as possible."

Source:

http://news.bbc.co.uk/1/hi/technology/5071656.stm

[Arkaic]

Why must we wait for critical updates. Oh lets give viruses, hackers, etc time to exploit the hole before patch tuesday! :angry:

Edited June 13, 2006 by Cierro

[Symphony]

Thanks for the info.

Btw: it would be intresting to know how Vista (B2) handles these flaws - as it got public before these fixes. I really like to hear a statement, like "Vista doesn't need these fixes, because of the rewritten network parts: it defends you from these flaws out of the box". :p But i have a feeling it won't happen... :rolleyes:

[Saadu]

Been to WU twice, no updates there.

[Bryan000]

not seeing anything here either. But they are usually on time for these monthly patch rollups. Should be later today

[Zirus]

https://www.neowin.net/forum/index.php?showtopic=469667

does anyone know what time they will come out today?

[BryanChung]

quick quick! quick quick!

[rishid]

At least they are fixing issues; I cannot even imagine being able to write the code for Windows XP on the first time through and not having errors/security vulnerabilities...only what 40 million lines of code in Windows XP? :wacko:

[ThisSiteHasLostItsCharm]

still nothing? wheres the big patch collection :whistle:

[Unholy Moley!]

If you guys are going to jack off to Windows Update, could you at least wait until they are released?

[Oblivion]

how big is this patch? any guesses?

[L3thal Veteran]

how big is this patch? any guesses?

Its more than one patch and the sizes of them are unknown as of now.

[Inplode]

still not there

[RadishTM Veteran]

They are out for me :)

Radish?

[grahamwilmott]

They are out for m:):)

Radish?

Same for me

[Bobster]

Yeah I have them too. Downloading them now :)

[RadishTM Veteran]

Also posted on the BBC News website -

http://news.bbc.co.uk/1/hi/technology/5071656.stm

Radish?

[BryanChung]

Okay I got them :)

[BryanChung]

where do i run the "Windows Malicious Software Removal Tool" ?

*hehe first time i downloaded it*

[L3thal Veteran]

where do i run the "Windows Malicious Software Removal Tool" ?

*hehe first time i downloaded it*

If you download it off Windows Update, it will automatically run. You won't notice it run unless it detects a trojan.

[Inplode]

getting them now !

[BryanChung]

If you download it off Windows Update, it will automatically run. You won't notice it run unless it detects a trojan.

Oh okay! Got it then :) Thanks! :yes:

[WinTech]

Here there is :

http://www.microsoft.com/technet/security/...n/MS06-021.mspx

http://www.microsoft.com/technet/security/...n/MS06-022.mspx

http://www.microsoft.com/technet/security/...n/MS06-023.mspx

http://www.microsoft.com/technet/security/...n/MS06-024.mspx

http://www.microsoft.com/technet/security/...n/MS06-025.mspx

http://www.microsoft.com/technet/security/...n/MS06-026.mspx

http://www.microsoft.com/technet/security/...n/MS06-027.mspx

http://www.microsoft.com/technet/security/...n/MS06-028.mspx

http://www.microsoft.com/technet/security/...n/MS06-029.mspx

http://www.microsoft.com/technet/security/...n/MS06-030.mspx

http://www.microsoft.com/technet/security/...n/MS06-031.mspx

http://www.microsoft.com/technet/security/...n/MS06-032.mspx

;)

[jameseuk]

High-priority updates

Microsoft Windows XP

Windows Malicious Software Removal Tool - June 2006 (KB890830)

Security Update for Windows XP (KB914389)

Security Update for Windows XP (KB918439)

Security Update for Windows XP (KB911280)

Security Update for Windows XP (KB917953)

Microsoft Office 2002/XP

Security Update for Word 2002 (KB917335)

Security Update for PowerPoint 2002 (KB916519)

Download size: 7.3 MB , less than 1 minute

Microsoft has released a security update for Microsoft PowerPoint 2002. This update resolves a security issue that could allow arbitrary code to run when you open a malicious presentation. Details...

(dunno why thats showing up,I'm not even using Powerpoint 2002,I'll save myself 7.3MB by not installing it,thus making my total download 8.5MB instead of 15.8MB)

[Orange]

Don't see why people or websites make a big deal out of updates.

Don't care if it's 100updates if it makes my pc better or just safer then i'm happy. :D