Datamation Logo

Many Critical Fixes From Microsoft

August 15, 2007
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

Microsoft’s monthly patch cycle was unusually large this month, with nine Security Bulletins addressing a total of 14 vulnerabilities. Eight of the fixes are listed as critical, the most important and severe issues. Four of the fixes are rated important and the final two are listed as moderate.

A particularly serious Bulletin is MS07-046, which addresses a remote code execution vulnerability in the Graphical Device Interface (GDI), which renders graphics and formats text. Since every application uses the GDI in one way or another, every Windows user is at risk for this exploit.

Another notable fix is MS07-048, which is rated as important. It addresses a number of vulnerabilities in Vista that could allow an anonymous remote attacker to run code with the privileges of Windows user.

What’s unique is the method of attack. The remote code execution could gain access to the computer through a malicious RSS feed in the Feed Headlines Gadget or by adding a malicious contacts file in the Contacts Gadget, or if a user clicked on a malicious link in the Weather Gadget.

Patch Tuesday for August is full of remote code execution fixes, such as MS07-042, a critical fix that prevents remote code execution from a specially crafted Web page that can attack Microsoft’s XML Core Services, while MS07-043 blocks malicious Web pages from attacking via the Object Linking and Embedding (OLE) layer in Windows.

Bulletin MS07-050, a critical fix, fixes a vulnerability in the Vector Markup Language (VML) used in Windows. The VML has seen its share of problems recently. Bulletin MS07-047 is an important fix for Windows Media Player.

This article was first published on InternetNews.com. To read the full article, click here.

  SEE ALL
APPLICATIONS ARTICLES
 

Subscribe to Data Insider

Learn the latest news and best practices about data science, big data analytics, artificial intelligence, data security, and more.

Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

Advertisers

Advertise with TechnologyAdvice on Datamation and our other data and technology-focused platforms.

Advertise with Us

Our Brands


Privacy Policy Terms & Conditions About Contact Advertise California - Do Not Sell My Information

Property of TechnologyAdvice.
© 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.