You are here: silicon.com > Software > Security Strategy

Security Strategy

Microsoft patches hasty patch

Scared of a mouse...

Tags: microsoft, flaw, patch, cursor

By Joris Evers

Published: 10 April 2007 08:59 BST

Microsoft is set to today push out a fix to repair problems caused by last week's emergency cursor flaw patch.

The fix will be delivered as a "high priority" update alongside Microsoft's regular security updates, Christopher Budd, a Microsoft security staffer wrote on a corporate blog.

Microsoft has identified three additional applications that conflict with last week's "critical" MS07-017 security update. Originally the company listed only the Realtek HD Audio Control Panel as software that would not function and cause error messages to appear. CD-Tag, ElsterFormular and TUGZip have been added to that list.

Budd wrote: "While the impact of these issues is clearly not widespread, it is affecting some of our customers." For example, in Germany the issue with ElsterFormular is causing headaches because companies use it to file their taxes, according to the Elster website.

Microsoft broke with its monthly patch cycle to repair a bug in the way Windows handles animated cursors. Cyber crooks had been using the hole to attack Windows PCs. Microsoft knew about conflicts with Realtek's audio software before releasing the fix and published a support article with the security bulletin.

Microsoft's Automatic Updates, the Windows feature that automatically downloads and installs fixes, will install the fix only on PCs that run conflicting applications, Budd wrote. The Windows Update and Microsoft Update websites will also offer it only if conflicting software is found on a PC, he wrote.

For organisations, Microsoft will make the fix available through its Windows Server Update Services and Software Update Services patch installation tools, though with a possible delay until later next week, Budd wrote. The fix is already available for download from Microsoft's website.

Microsoft also plans to release five security bulletins today, four of which will address Windows flaws. The bulletins, part of Microsoft's monthly patch cycle, will provide fixes for an undisclosed number of security vulnerabilities.

Joris Evers writes for CNET News.com

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Data Centre Operations Technician (Hardware, Server, IT, Windows, Linux)

Your responsibilities will include: - Build, upgrade and configure custom ordered servers spanning several different platforms and configurations - ...

Websphere IT Specialist / Architect

Trouble shoot and fix technical problems, liaising with product management and technical support to organise a patch if necessary. Must understand ...

Technical Support Engineer Windows XP 2003, Microsoft Outlook, LANs, WANs, DNS,

Pension Private Medical Healthcare Permanent Health Insurance Life Assurance Childcare Vouchers Season Ticket Loan Cycle to Work Scheme Give As You ...

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.





Quick Sitemap Links: