Subscribe by EmailMicrosoft Patch Day: 7 Bulletins, 19 Flaws
May 9, 2007 by Kiltak |Yep, it’s that time of the month again. The folks at Microsoft have just released seven new security bulletins as part of their monthly patch cycle. They have also updated their Malicious Software Removal Tool.
Here are the details:
-MS07-023: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233) - Max Severity: Critical
-MS07-024: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232) - Max Severity: Critical
-MS07-025: Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873) - Max Severity: Critical
-MS07-026: Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832) - Max Severity: Critical
-MS07-027: Cumulative Security Update for Internet Explorer (931768) - Max Severity: Critical
-MS07-028: Vulnerability in CAPICOM Could Allow Remote Code Execution
(931906) - Max Severity: Critical
-MS07-029: Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966) - Max Severity: Critical
Happy patching everyone!
You Might Also Like:
- It’s Microsoft Patch Day… Again!
- Windows Zero-day “Animated Cursor” Vulnerability
- Use F-Secure’s HealthCheck to Find Security Holes
- Patch Your Non-OS Applications
Nothing I like better than updating my OS and Office apps.
I’m one of those people who updated once every 6 months because the reboot was annoying. Now I can update daily (if I’m unstable) or once or twice a week, but almost never reboot (unless it’s a kernel update, which is once every 3 or 4 months if you’re stable). I like it this way.
Maybe the modularity of Linux is why I can have updates to the entire system (because instead of consciously checking for OOo or Firefox or Banshee or Sunbird or GRAMPS or whatever updates, they just come through with regular automatic updates) and not need to reboot; it just reloads the updated parts and keeps chugging. Windows isn’t modular, so it could be that it’s nearly impossible for Windows to just reload one chunk of itself to activate the update. If that’s the problem, maybe it should be made more modular so that it can handle things like low-level crashes (one part breaks, the rest just sort of amputates it and keeps going until it can be reattached instead of getting gangrene and dying) and activating updates on smaller parts of the system. Heck, with most large configuration changes on Linux, you just restart the graphical part of the OS (ctrl +alt+backspace or log out/in) which is much faster (for me, about 35 seconds faster…meaning it’s around 7-10 seconds) than rebooting. For driver modules, it’s “sudo modprobe -r $drivername” then “sudo modprobe $drivername” (-r is for “remove” but “rmmod” can replace “modprobe -r” as well) if you want to remove the out-of-date driver from memory and load the newly-installed one. It’s faster when setting up than waiting for Windows to reboot when installing drivers too.