diTii.com Digital News Hub

Sign up with your email address to be the first to know about latest news and more.

I agree to have my personal information transfered to MailChimp (more information)


Microsoft Security Bulletin Advance Notification for July 2008 – To address Windows, SQL Server and Exchange Server exploits

Microsoft will release four security patches for its Windows, Exchange, and SQL products next Tuesday, all rated “important.” The Exchange and SQL flaws are “Elevation of Privilege” bugs, meaning that an attacker could theoretically exploit them to get administrative access to a PC. One of the Windows flaws is labeled a “spoofing” bug, meaning that it could help hackers trick the user into doing things like visiting malicious Web sites.

The fourth update fixes a Windows flaw that could allow an attacker to run unauthorized code on a victim’s PC, Microsoft said. Normally, this type of flaw is rated “critical” by Microsoft, but in this case the bug was probably given a less-severe rating because it doesn’t work without the user first taking some extra actions or adding special software or drivers, said Eric Schultze, chief technology officer at Shavlik Technologies. This remote code execution flaw affects Windows Vista and Windows Server 2008.

The SQL vulnerability affects Microsoft’s SQL Server software and the internal SQL software that ships with some versions of Windows. It does not affect Vista or XP users, but it does exist on the Windows 2000, Windows Server 2003 and Windows Server 2008 products.

Full Bulletin

Share This Story, Choose Your Platform!

Get Latest News

Subscribe to Digital News Hub

Get our daily newsletter about the latest news in the industry.
First Name
Last Name
Email address
Secure and Spam free...