Microsoft preps critical Windows Media patch

Microsoft will issue a security update on Tuesday that patches a total of seven vulnerabilities in Windows and related applications.

One of the vulnerabilities affects Windows Media Player and is rated 'critical'. This is Microsoft's highest severity rating and typically means that a system can become compromised without user interaction.

Windows itself is scheduled to receive four security patches, at least one of which is rated 'critical'.

Microsoft is also preparing an 'important' update for a flaw that affects both Windows and the Office productivity suite, and the final fix is for Office and is rated 'important'.

The company did not say whether the upcoming patch will also include a fix for a critical vulnerability affecting Internet Explorer 5 and 5.5, about which it sent out a security advisory on Wednesday. 

Microsoft typically publishes its security updates on the second Tuesday of the month and gives notice about the kind of updates that it is preparing in the week prior to the release. This schedule is aimed at helping administrators to prepare.

The company publishes out-of-cycle updates on rare occasions. Last month Microsoft was forced to rush out a fix for a vulnerability in the WMF graphics format that attackers were actively exploiting.

Hackers writing zero-day malware to order

2005 was watershed year for zero-day exploits, warns security firm  04 Feb 2006

Zero-day exploit exposes Winamp users

Media player hit by critical buffer overflow flaw  31 Jan 2006

AMD forum users exposed to WMF worm

Failure to patch put users at risk  31 Jan 2006

F-Secure patches antivirus engine flaw

Patch now before it's exploited, advises security firm  20 Jan 2006

Windows 2000/XP fall through Wi-Fi flaw

Hacking conference spills the beans on Microsoft Wi-Fi vulnerability  16 Jan 2006

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!