Four IE bugs fixed by Patch Tuesday release

Seven updates, three critical in monthly security update.

Microsoft

has released its monthly ‘Patch Tuesday’ security bulletin, featuring seven updates of which three are marked ‘critical’ and cover flaws which could allow remote execution of code if exploited on vulnerable systems.

The critical issues are with

DirectX

,

Windows Media Format

and

Internet Explorer

, in which four separate vulnerabilities are fixed by a cumulative update. All could be used to gain system access if a malicious file or webpage is viewed on affected systems.

The less significant vulnerabilities, all rated ‘important’, affect

SMBv2

,

Message Queuing Service

, the

Macrovision

driver and the

Windows

kernel.

Users are advised to ensure all security updates are applied promptly to keep their systems as safe as possible. More details of the updates are at

Microsoft


here

.

Posted on 12 December 2007 by

Virus Bulletin