Channel Register®

Original URL: http://www.channelregister.co.uk/2005/07/13/ms_july_patch_batch/

Three critical fixes in MS July security update

Get those peril-sensitive sunglasses on standby

By John Leyden

Posted in Software & Security, 13th July 2005 10:35 GMT

Free whitepaper – Solid State Drives and High-Speed Memory

It's that time of the month again. Microsoft's patch bandwagon [1] rolled into town yesterday loaded with three critical updates.

The updates aim to fix a vulnerability [2] found in the Color Management Module of Windows that could allow remote code execution (MS05-036 [3]) and a security bug in JView Profiler (MS05-037 [4]) that might be used to crash Internet Explorer and inject hostile code. Last, but not least, is a vulnerability [5] in several Microsoft Word versions involving font parsing that could also be used as a conduit to smuggle malicious code onto vulnerable systems (MS05-035 [6]). US CERT has produced an overview of Microsoft's three critical security fixes here [7]. ®

Related stories

MS issues final software update for Win2K [8]
10 vulns - three critical - in MS patch batch [9]
Microsoft issues solitary patch [10]
Microsoft fortifies monthly patches with interim advisories [11]
SANS revises Top 20 security vulns list [12]