Windows 7 holes plugged in record Patch Tuesday
Published: 14 Oct 2009 08:18 BST
Microsoft released a record number of 13 bulletins for 34 vulnerabilities on Patch Tuesday — and the first critical update for Windows 7 — as well as fixes for zero-day flaws involving Server Message Block and Internet Information Services, or IIS.
The most severe of the three Server Message Block (SMB) flaws, which were first reported in September, could allow an attacker to take control of a computer remotely by sending a specially crafted SMB packet to a computer running the Server service. Exploit code for one of the SMB holes has been posted to the web, Microsoft said.
Windows 7 is affected by two critical patches intended to mend vulnerabilities that could allow remote code execution if a malicious web page were viewed, one part of a cumulative security update for Internet Explorer and the other in .Net Framework and Silverlight.
See Windows 7 critical holes fixed in record Patch Tuesday on CNET News for more on this story.













