Firefox Posted April 7, 2011 ID:412777 Share Posted April 7, 2011 Microsoft sets mammoth Patch Tuesday, will fix 64 flaws'Out of line with anything normal,' says security expertMicrosoft today said it will patch a record 64 vulnerabilities in Windows, Office, Internet Explorer, Windows graphics framework, and other software next week, and tie a December 2010 record for the number of security updates it issues.The 17 updates -- Microsoft calls them "bulletins" -- tie the count of December 2010. The bulletins that will ship next Tuesday will include 64 patches, Microsoft said, 15 more than the previous record of October 2010, and 24 more than the 40 of the former second-place collection of December 2010.Of the 17 updates, 9 will be rated "critical," the highest threat label in Microsoft's four-step scoring system, while the remaining 8 will be marked "important," the second-most-dire ranking."We were expecting the larger release this month, based on the normal cadence," said Andrew Storms, director of security operations at nCircle Security, referring to Microsoft's habit of issuing a larger number of updates on even-numbered months."But a whopping 64 CVEs is out of line with anything normal for Microsoft," Storms observed, talking about the Common Vulnerabilities and Exposures labels that identify individual bugs. "All hands on deck will be required next week."Microsoft said it will close a pair of outstanding issues that have already resulted in security advisories, including a vulnerability in Windows' MHTML (MIME HTML) protocol handler that it acknowledged last January.The MHTML flaw went public that same month when the Chinese Web site WooYun.org published proof-of-concept code.Next week's patches will also quash a bug in the Windows Server Message Block (SMB) network and file-sharing protocol that was disclosed in February on the Full Disclosure security mailing list.Microsoft later downplayed the threat posed by the vulnerability, saying it was unlikely the bug could be exploited to compromise a computer.Other updates will address one or more vulnerabilities in Office, Internet Explorer (IE), Visual Studio, .Net and GDI+. The latter is Windows' Graphics Device Interface, the graphics rendering component of the operating system."As usual, [the IE update] will be on the top of the list for deployment," said Storms. The monthly advance notification -- where Microsoft alerts customers of the number of overall security patches and updates, as well as what products they will affect -- was several hours late in reaching users.Microsoft usually issues its advance alert at around 1 p.m. ET, but unspecified problems with the distribution system delayed its release for nearly three hours.The 17 updates will be released at approximately 1 p.m. ET on April 12. Link to post Share on other sites More sharing options...
Comprev Posted April 8, 2011 ID:412856 Share Posted April 8, 2011 It will be interesting to see how the bad guys respond to this. Link to post Share on other sites More sharing options...
agentsil Posted April 8, 2011 ID:412922 Share Posted April 8, 2011 HURMM..TIME WILL TELL.. Link to post Share on other sites More sharing options...
Haider Posted April 8, 2011 ID:413043 Share Posted April 8, 2011 Thanks for sharing Link to post Share on other sites More sharing options...
ShyWriter Posted April 8, 2011 ID:413068 Share Posted April 8, 2011 Windows 8 will be the biggest patch. Can't wait..Shy Link to post Share on other sites More sharing options...
Popeye Posted April 8, 2011 ID:413086 Share Posted April 8, 2011 Thanks Firefox for the info on Mammoth Patch Tuesday. Link to post Share on other sites More sharing options...
Conor55 Posted April 8, 2011 ID:413198 Share Posted April 8, 2011 Thanks Firefox. Link to post Share on other sites More sharing options...
mountaintree16 Posted April 11, 2011 ID:414253 Share Posted April 11, 2011 WheeeThanks for posting Link to post Share on other sites More sharing options...
chimpy Posted April 12, 2011 ID:414658 Share Posted April 12, 2011 All I got was one update and that was IE9 to download finally. Link to post Share on other sites More sharing options...
Haider Posted April 12, 2011 ID:414747 Share Posted April 12, 2011 Windows 8 will be the biggest patch. Can't wait..ShyThat's more than 100% correct!!! Link to post Share on other sites More sharing options...
chimpy Posted April 13, 2011 ID:415339 Share Posted April 13, 2011 Spoke to soon, the IE one wasn't part of the patch, I just got 14 updates Link to post Share on other sites More sharing options...
mountaintree16 Posted April 13, 2011 ID:415391 Share Posted April 13, 2011 Manually checked yesterday evening, and they all came through (I think my auto checker is set for like 3 am or something)? Link to post Share on other sites More sharing options...
Firefox Posted April 13, 2011 Author ID:415414 Share Posted April 13, 2011 I had like 29 updates to do.... Link to post Share on other sites More sharing options...
jeffce Posted April 13, 2011 ID:415428 Share Posted April 13, 2011 I just got mine and they all came through. I just checked manually as well to make sure. Link to post Share on other sites More sharing options...
mountaintree16 Posted April 13, 2011 ID:415430 Share Posted April 13, 2011 14 or so updates here... XP.We also don't have Office or anything, so that cut down on the number of updates.Good idea, I'll do another manual check later just in case but I think I got em all Link to post Share on other sites More sharing options...
wildman424 Posted April 13, 2011 ID:415523 Share Posted April 13, 2011 I had 20 myselfSecurity Update for Windows XP (KB2485663)Download size: 606 KB , less than 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2508429)Typical download size: 331 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2506212)Typical download size: 443 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2506223)Typical download size: 497 KB , 1 minute A security issue has been identified that could allow an authenticated local attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2511455)Download size: 702 KB , less than 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2491683)Typical download size: 262 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2503658)Typical download size: 265 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain access to information. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Cumulative Security Update for ActiveX Killbits for Windows XP (KB2508272)Download size: 489 KB , less than 1 minute Security issues have been identified in ActiveX controls that could allow an attacker to compromise a system running Microsoft Internet Explorer and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2497640)Download size: 10 MB , 11 minutes Security issues have been identified that could allow an attacker to compromise a system that is running Microsoft Internet Explorer and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Security Update for Windows XP (KB2507618)Typical download size: 271 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 and Windows XP x86 (KB2446704)Download size: 11.8 MB , 13 minutes A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2446708)Download size: 11.2 MB , 13 minutes A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Security Update for Windows XP (KB2510531)Download size: 950 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2412687)Download size: 1.2 MB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Security Update for Windows XP (KB2509553)Typical download size: 316 KB , 1 minute A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details... Windows Malicious Software Removal Tool - April 2011 (KB890830)Download size: 4.7 MB , 5 minutes After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Details... Microsoft Visual Studio 2005Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB2467175)Download size: 2.6 MB , 3 minutes A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Microsoft Visual Studio 2008Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2467174)Download size: 4.3 MB , 5 minutes A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Microsoft Visual Studio 2010Security Update for Microsoft Visual Studio 2010 (KB2455033)Download size: 265.7 MB , 4 hours 57 minutes A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Security Update for Microsoft Visual C++ 2010 Redistributable Package (KB2467173)Download size: 8.6 MB , 10 minutes A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details... Link to post Share on other sites More sharing options...
Conor55 Posted April 13, 2011 ID:415637 Share Posted April 13, 2011 25 for me. Link to post Share on other sites More sharing options...
mona7865 Posted April 13, 2011 ID:415680 Share Posted April 13, 2011 25 for me. Here too on the Win XP, still have to do the updates on the Mini but that will be something for tomorrow. Link to post Share on other sites More sharing options...
DarkSnakeKobra Posted April 13, 2011 ID:415694 Share Posted April 13, 2011 I got 16.@MTThe default settings is 3 AM for Xp/Vista/7. Might want to change that to something else unless your puter will be on then.Security Update for Windows 7(KB2508429)Cumulative Security Update for ActiveX Killbits for Windows 7(KB2508272)Security Update for Microsoft Visual C++ Service Pack 1 Redistributable Package(KB2467175)Security Update for Windows 7(KB2509553)Security Update for Windows 7(KB2509553)Security Update for Microsoft Visual C++ 2010 Redistributable Package(KB2467173)Security Update for Windows 7(KB2506223)Update for Windows 7(KB2511250)Security Update for Microsoft .NET Framework 4 on Windows XP, Windows 2003, Windows Vista, Windows 7, Windows Server 2008 x86(KB2446708)Security Update for Microsoft Visual Studio 2010(KB2455033)Security Update for Windows 7(KB2503658)Windows Malicious Software Removal Tool - April 2011(KB890830)Security Update for Windows 7(KB2506212)Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package(KB2467174)Security Update for Windows 7(KB2511455)Security Update for .NET Framework 3.5.1 on Windows 7 SP1 x86(KB2446710) Link to post Share on other sites More sharing options...
byte_king Posted April 14, 2011 ID:415800 Share Posted April 14, 2011 I got 21 updates. Woohoo! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now