Jump to content

Microsoft sets mammoth Patch Tuesday, will fix 64 flaws


Recommended Posts

Microsoft sets mammoth Patch Tuesday, will fix 64 flaws

'Out of line with anything normal,' says security expert

Microsoft today said it will patch a record 64 vulnerabilities in Windows, Office, Internet Explorer, Windows graphics framework, and other software next week, and tie a December 2010 record for the number of security updates it issues.

The 17 updates -- Microsoft calls them "bulletins" -- tie the count of December 2010. The bulletins that will ship next Tuesday will include 64 patches, Microsoft said, 15 more than the previous record of October 2010, and 24 more than the 40 of the former second-place collection of December 2010.

Of the 17 updates, 9 will be rated "critical," the highest threat label in Microsoft's four-step scoring system, while the remaining 8 will be marked "important," the second-most-dire ranking.

"We were expecting the larger release this month, based on the normal cadence," said Andrew Storms, director of security operations at nCircle Security, referring to Microsoft's habit of issuing a larger number of updates on even-numbered months.

"But a whopping 64 CVEs is out of line with anything normal for Microsoft," Storms observed, talking about the Common Vulnerabilities and Exposures labels that identify individual bugs. "All hands on deck will be required next week."

Microsoft said it will close a pair of outstanding issues that have already resulted in security advisories, including a vulnerability in Windows' MHTML (MIME HTML) protocol handler that it acknowledged last January.

The MHTML flaw went public that same month when the Chinese Web site WooYun.org published proof-of-concept code.

Next week's patches will also quash a bug in the Windows Server Message Block (SMB) network and file-sharing protocol that was disclosed in February on the Full Disclosure security mailing list.

Microsoft later downplayed the threat posed by the vulnerability, saying it was unlikely the bug could be exploited to compromise a computer.

Other updates will address one or more vulnerabilities in Office, Internet Explorer (IE), Visual Studio, .Net and GDI+. The latter is Windows' Graphics Device Interface, the graphics rendering component of the operating system.

"As usual, [the IE update] will be on the top of the list for deployment," said Storms.

The monthly advance notification -- where Microsoft alerts customers of the number of overall security patches and updates, as well as what products they will affect -- was several hours late in reaching users.

Microsoft usually issues its advance alert at around 1 p.m. ET, but unspecified problems with the distribution system delayed its release for nearly three hours.

The 17 updates will be released at approximately 1 p.m. ET on April 12.

cwlogo.JPG

Link to post
Share on other sites

Manually checked yesterday evening, and they all came through :) (I think my auto checker is set for like 3 am or something)?

Link to post
Share on other sites

I just got mine and they all came through. I just checked manually as well to make sure. :)

Link to post
Share on other sites

14 or so updates here... XP.

We also don't have Office or anything, so that cut down on the number of updates.

Good idea, I'll do another manual check later just in case but I think I got em all :)

Link to post
Share on other sites

I had 20 myself

Security Update for Windows XP (KB2485663)

Download size: 606 KB , less than 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2508429)

Typical download size: 331 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2506212)

Typical download size: 443 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2506223)

Typical download size: 497 KB , 1 minute

A security issue has been identified that could allow an authenticated local attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2511455)

Download size: 702 KB , less than 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2491683)

Typical download size: 262 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2503658)

Typical download size: 265 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain access to information. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Cumulative Security Update for ActiveX Killbits for Windows XP (KB2508272)

Download size: 489 KB , less than 1 minute

Security issues have been identified in ActiveX controls that could allow an attacker to compromise a system running Microsoft Internet Explorer and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2497640)

Download size: 10 MB , 11 minutes

Security issues have been identified that could allow an attacker to compromise a system that is running Microsoft Internet Explorer and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Security Update for Windows XP (KB2507618)

Typical download size: 271 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for .NET Framework 2.0 SP2 and 3.5 SP1 on Windows Server 2003 and Windows XP x86 (KB2446704)

Download size: 11.8 MB , 13 minutes

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2446708)

Download size: 11.2 MB , 13 minutes

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Security Update for Windows XP (KB2510531)

Download size: 950 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2412687)

Download size: 1.2 MB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Security Update for Windows XP (KB2509553)

Typical download size: 316 KB , 1 minute

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. Details...

Windows Malicious Software Removal Tool - April 2011 (KB890830)

Download size: 4.7 MB , 5 minutes

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Details...

Microsoft Visual Studio 2005

Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB2467175)

Download size: 2.6 MB , 3 minutes

A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Microsoft Visual Studio 2008

Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2467174)

Download size: 4.3 MB , 5 minutes

A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Microsoft Visual Studio 2010

Security Update for Microsoft Visual Studio 2010 (KB2455033)

Download size: 265.7 MB , 4 hours 57 minutes

A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Security Update for Microsoft Visual C++ 2010 Redistributable Package (KB2467173)

Download size: 8.6 MB , 10 minutes

A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Details...

Link to post
Share on other sites

I got 16.

@MT

The default settings is 3 AM for Xp/Vista/7. Might want to change that to something else unless your puter will be on then.:)

Security Update for Windows 7(KB2508429)

Cumulative Security Update for ActiveX Killbits for Windows 7(KB2508272)

Security Update for Microsoft Visual C++ Service Pack 1 Redistributable Package(KB2467175)

Security Update for Windows 7(KB2509553)

Security Update for Windows 7(KB2509553)

Security Update for Microsoft Visual C++ 2010 Redistributable Package(KB2467173)

Security Update for Windows 7(KB2506223)

Update for Windows 7(KB2511250)

Security Update for Microsoft .NET Framework 4 on Windows XP, Windows 2003, Windows Vista, Windows 7, Windows Server 2008 x86(KB2446708)

Security Update for Microsoft Visual Studio 2010(KB2455033)

Security Update for Windows 7(KB2503658)

Windows Malicious Software Removal Tool - April 2011(KB890830)

Security Update for Windows 7(KB2506212)

Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package(KB2467174)

Security Update for Windows 7(KB2511455)

Security Update for .NET Framework 3.5.1 on Windows 7 SP1 x86(KB2446710)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.