Mini-Patch Day for Microsoft Two Security Fixes and Anti-Malware Tool Update for March Jim Wagner
Computer users hoping for a fresh batch of security updates on Microsoft's patch Tuesday only received two minor tweaks and the next edition of the company's malware removal tool.
Microsoft added Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (ME) support for two security updates released in previous monthly
updates.
The company patched a critical remote code vulnerability in cursor and icon format handling that can lead to a Denial-of-Service attack (define), first introduced in January. More information on Microsoft Security Bulletin MS05-002 can be found here.
It also patched a critical remote code vulnerability in the hyperlink object library, which can lead to remote code execution when handling hyperlinks. First patched last month, more information on Microsoft Security Bulletin MS05-015 is available here.
Security support for these three operating systems ends June 30, 2006. Officials say they will only provide extended security support from the Windows Update site when the vulnerabilities are rated "critical." Non-critical security updates are available through the company's On-Demand Security Hotfix support.
Microsoft also announced Tuesday updates to its Malicious Software Removal Tool, the third monthly update to the utility since its launch in January.
The virus families added to the removal tool are: Sobig, Bagle, Bropia, Sober and Goweh, as well as 160 new variants of the Gaobot worm
(define) and 11 new Mydoom variants.
The Redmond giant also tweaked the malware tool's download user interface, adding a download progress bar and welcome page, and added a one-time End-User License Agreement to the download.
Officials still expect to host its monthly security webcast Wednesday at 2 p.m. EST. Interested parties can register for the event here.
