Microsoft plans to patch critical Windows bug next week

[Peaches]

Microsoft plans to patch critical Windows bug next week

But it's not ready to fix newest IE and Windows flaws

By Gregg Keizer

January 6, 2011 02:57 PM E

Computerworld - Microsoft today announced it would release just two security updates next week to patch three vulnerabilities in Windows. One of the two was tagged with the "critical" label, Microsoft's highest threat ranking, while the other was marked "important." Microsoft typically assigns a critical rating to vulnerabilities that can be exploited with little or no action on the part of a user.

Both updates will patch flaws in Windows.

What Microsoft pegged as "Bulletin 1" in the advance notification it published today will affect only Windows Vista, while "Bulletin 2" will affect all still-supported versions of the OS, with the client editions -- XP, Vista and Windows 7 -- labeled critical and the server software rated important.

"The Vista one is confusing," said Andrew Storms, director of security operations at nCircle Security. "It's either something introduced in Vista but doesn't exist in Windows 7, or the component was rewritten for Windows 7."

Further details here: http://www.computerw...s_bug_next_week