Thursday, November 15, 2007

Microsoft patches a 'critical' hole

SEATTLE (AP) — Microsoft issued two security fixes in a regular monthly update Tuesday, including one that removes a dangerous bug in all versions of Windows XP and Windows Server 2003.
Microsoft gave the serious security fix its most urgent "critical" rating. Hackers could exploit a vulnerability using Internet Explorer 7, and possibly other programs, and take over a user's computer for a variety of nefarious purposes, such as stealing passwords or pumping out spam.
The security hole "is concerning as it's a publicly known issue that puts computer users at risk," said Ben Greenbaum, a senior research manager on anti-virus software maker Symantec's security response team.
The other fix, which Microsoft gave the second-highest "important" rating, is for computers running versions of Windows 2000 Server and Windows Server 2003. Hackers could exploit the flaw in Microsoft's program to redirect Internet traffic from legitimate sites to fake ones.
Windows users can visit Microsoft's security website to get the updates or configure their computers to automatically update each month.
FIND MORE STORIES IN: Microsoft Windows Windows XP Hackers Microsoft software Server
Copyright 2007 The Associated Press.

No comments: