Microsoft fixes Excel, carpet-bombing security flaws

Microsoft has fixed critical flaws in its Windows, Office, and Internet Explorer software in the company's largest set of security patches this year.

Released Tuesday, the updates fix a number of well-known problems in the company's software, including vulnerabilities in Excel and the WordPad text converter that have been exploited by attackers in a small number of online attacks.

A few other known bugs also were fixed Tuesday, including some issues in Windows and Internet Explorer that could be used to pull off a so-called "carpet-bombing" attack, and Windows flaws that could give attackers extra privileges on a Windows machine.

All told, Microsoft released eight software updates, fixing dozens of bugs in its products. Five of the updates are rated critical by Microsoft, meaning they fix flaws that could be exploited by attackers to run unauthorized software on a computer.

Systems administrators should probably patch the Excel and WordPad bugs first, said Eric Schultze, the chief technology officer with Shavlik Technologies. "There are known issues out here, and why flirt with danger," he said.

The patch for Internet Explorer -- always a favorite target of attack by hackers -- and another critical fix for Microsoft's DirectX multimedia software should also be given top priority, he said.

Another critical patch is in the HTTP software used by Windows computers to connect to Web sites. This update is rated critical for all supported versions of Windows.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine