Quantcast

Microsoft patches released 4/13

Microsoft Security Bulletin MS04−011: Security Update for Microsoft Windows.

This update resolves several newly−discovered vulnerabilities which are detailed on the Microsoft Website. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts that have full privileges. Microsoft has assigned a risk rating of "Critical" to these issues and recommends that customers apply the update immediately.

Source: http://www.microsoft.com/technet/security/bulletin/ms04−011.mspx

Microsoft Security Bulletin MS04−012 Cumulative Update for Microsoft RPC/DCOM.

This update resolves several newly−discovered vulnerabilities in RPC/DCOM. Each vulnerability is documented on the Microsoft Website. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of the affected system. An attacker could then take any action on the affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts that have full privileges. Microsoft has assigned a risk rating of "Critical" to this issue and recommends customers apply the update immediately.

Source: http://www.microsoft.com/technet/security/bulletin/ms04−012.mspx

Microsoft Security Bulletin MS04−013 Cumulative Security Update for Outlook Express.

This is a cumulative update that includes the functionality of all the previously−released updates for Outlook Express 5.5 and Outlook Express 6. Additionally, it eliminates a new vulnerability that could allow an attacker who successfully exploited this vulnerability to access files and to take complete control of the affected system. This could occur even if Outlook Express is not used as the default e−mail reader on the system. Microsoft has assigned a risk rating of "Critical" to this issue and recommends that customers install this update immediately.

Source: http://www.microsoft.com/technet/security/bulletin/ms04−013.mspx

Microsoft Security Bulletin MS04−014 Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution.

A buffer overrun vulnerability exists in the Microsoft Jet Database Engine (Jet) that could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts that have full privileges. Microsoft recommends that customers install the update at the earliest opportunity.

Source: http://www.microsoft.com/technet/security/bulletin/ms04−014.mspx
 

ET_SoCal

Monkey
Aug 10, 2001
398
0
C-Me Valley, CA
You know how often M/S posts new patches/updates ?

I'm responsible for keeping {a lot} of PC's up-2-date on critical updates & service packs.... (NT4, W2K, XP, all M/S applications) :monkey:

Lot's of times they don't apply to what most users have or are doing, but I'm supposted to keep things curent...

Always running around the offices :rolleyes: