Microsoft will next week launch a number of security fixes designed to
address vulnerabilities issues in ActiveX and DirectShow, among other systems.
According to Microsoft, the
weaknesses
have already attracted the attention of hackers and the firm is keen to fix them
in its monthly patch update, set for 14 July.
Three of the issues are rated as 'critical' while the remaining three are
rated as 'important'. Microsoft is urging users to fix the issues as soon as
possible and has provided guidance for firms on how best to prepare themselves
for the patches.
Writing on
his
blog, Jerry Bryant of Microsoft's security response team said, "I want to
provide some clarity on two of the pending Windows updates mentioned. First, we
will be addressing the issue concerning a vulnerability in DirectShow. As noted
in the advisory, we are aware of limited active attacks and we have been working
aggressively to get a quality update shipped to customers.
"Second, our engineering teams have been working around the clock to produce
an update for the issue discussed in Security Advisory 972890 (vulnerability in
the Microsoft Video ActiveX Control) and we believe that they will be able to
release an update of appropriate quality for broad distribution that protects
against the attacks we detailed in the advisory and in an MSRC blog post by
Christopher Budd."
Bryant encouraged customers in the meantime to continue to enable the
workaround for the latter vulnerability "by running the 'Microsoft Fix it'
solution in the associated knowledge base article (KB972890)".
He also urged users to visit the Microsoft Security Research and Defence blog
as well as the MSRC site on Tuesday for additional information.
Do you agree?
Have your say on this article