Microsoft plans four patches for February

Microsoft plans to release four patches on 10 February

Microsoft has published the advance notice for its monthly Patch Tuesday security release.

The company plans to release four patches on 10 February, two rated 'critical' and two rated 'important'. All four address flaws which, if exploited, could allow an attacker to remotely execute code on a targeted system.

The first of the critical fixes will address flaws in Internet Explorer 7. The patch is rated as a 'critical' update for Windows XP and Vista systems, while Server 2003 and Server 2008 systems are considered to be at a less-severe 'moderate' security risk.

Windows Server operating systems were spared from a critical update in the IE7 patch, but both systems will receive a patch for a flaw in the SQL Server engine. Neither Windows XP or Windows Vista are considered to be at risk.

The third patch will address one or more critical vulnerabilities in Exchange Server 2000, 2003 and 2007. No other programs or operating systems are considered to be at risk.

The final patch will address a flaw in the Microsoft Office Visio diagram-building tool. The update will address vulnerabilities in Visio 2002, 2003 and 2007 rated as 'important'.

More information on the specifics of each patch will be released on Tuesday when Microsoft posts the actual update. While no set release time was given, the updates are generally posted by mid-day US Pacific time.