Microsoft Announces Three More Critical Vulnerabilities

weekendwarrior1980 writes "Microsoft warned that three 'critical'-rated flaws in the Windows operating system and other programs could allow hackers to sneak into personal computers and snoop on sensitive data. The flaws could allow attackers to break into PCs running Windows in several ways and then use the system to run malicious programs and steal or delete key data. These latest security flaws affect the latest versions of Windows, including Windows NT 4.0, Windows 98, Windows 2000 , Windows XP, as well as software for networked computers such as Windows NT Server and Windows Server 2003." Their bulletins are available for these vulnerabilities. Techweb has a pretty good summary.

Comments

Worm Writer's Delight

[Dynamoo]

What's frightening is that there are *so* many remote code execution vulnerabilities in this one. At least they're all rolled up into one patch. But this gives so many potential backdoors for a Blaster style worm.

Here we go again...

I was wondering about that

[ObviousGuy]

I've got IE configured to present itself to websites as Netscape so I can't check the Windows Update webpage, I have to rely on automatic update to tell me of new patches. For the past couple months there has been nary a one patch, then today a whole handful of them.

What a surprise. My bandwidth was halved by the invisible download.

Whoops. Be right back. Install is finished, gotta reboot.

Won't announcing vulnerabilities cause exploits?

[David Hume]

Won't announcing the vulnerabilities cause them to be expoited??

Shouldn't Microsoft as a result slow down the security patch cycle?