madison

Zero Day

Ryan Naraine and Dancho Danchev

Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office

By | June 9, 2011, 12:13pm PDT

Summary: According to an advance notice from Microsoft, two of the critical bulletins will address high-severity vulnerabilities in the Internet Explorer browser.

This months’ batch of security patches from Microsoft will be a huge one:  16 bulletins covering a wide range of security holes in the Windows operating system.

Nine of the 16 bulletins are rated “critical” because of the risk of remote code execution attack.

According to an advance notice from the Redmond, Wash. software maker, two of the critical bulletins will address high-severity vulnerabilities in the Internet Explorer browser.

In addition to security holes in the Windows OS and Internet Explorer, the following products are also affected by the June patch batch:follow Ryan Naraine on twitter

  • Microsoft .NET Framework
  • Microsoft Silverlight
  • Microsoft Forefront Threat Management Gateway
  • Microsoft Office
  • Microsoft SQL Server
  • Microsoft Visual Studio
All supported versions of Windows are affected by this month’s patches, which are scheduled for release on Tuesday June 14, 2011.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.

Disclosure

Ryan Naraine

The most important disclosure is of my employment with Kaspersky Lab as a security evangelist. Kaspersky Lab is a global company specializing in anti-malware and secure content management technologies. I do not own stocks or other investments in any technology company.

Biography

Ryan Naraine

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management technologies.

Prior to joining Kaspersky Lab, Ryan was Editor-at-Large/Security at eWEEK, leading the magazine's and Web site's coverage of Internet and computer security issues and managing the popular SecurityWatch blog, covering the daily threats, vulnerabilities and IT security technologies. He also covered IT security, hacker attacks and secure content management topics for Jupiter Media's internetnetnews.com.

Ryan can be reached at naraine SHIFT 2 gmail.com. For daily updates on Ryan's activities, follow him on Twitter.

Talkback Most Recent of 57 Talkback(s)

  • ZDNet Gravatar
    pastordl
    10th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @pastordl Firefox is always patching themselves too. They are still not being targeted because they are losing market share. Chrome and IE9 are being targeted more. However, IE9 still has less vulnerabilities compared to any other browsers.
    ZDNet Gravatar
    jack@...
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @jack@... I use ZoneAlarm Extreme Security. It has a browser security product called (i think) forcefield. It's another sandbox type. So far I have had no problems with either IE or Firefox. Oh! One downside is that ZA does not support the latest versions of either IE or Firefox. I'm waiting in the new ZA version.
    ZDNet Gravatar
    I am Gorby
    9th Jun
  • ZDNet Gravatar
    Michael Alan Goff
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @goff256

    He didn't say that. Go back and read it again.

    doh...
    ZDNet Gravatar
    ScorpioBlue
    10th Jun
  • ZDNet Gravatar
    jamalgordon410
    2nd Oct
  • ZDNet Gravatar
    joellendemps
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @joellendemps
    Especially with "No Script" & "Adblock Plus" loaded on.
    ZDNet Gravatar
    ncironman
    10th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    I tend to think people who use IE are basically asking for it. Maybe they don't deserve to be hacked, but they're wearing a short skirt.

    Anyway, even if it has less vulnerabilities than other browsers, its still a big pile of S*** and you couldn't pay me to use it.
    ZDNet Gravatar
    stooge51
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @stooge51

    YOUR USER I.D. IS APPROPRIATE HOWEVER, "JERK" ALSO COMES TO MIND !!
    ZDNet Gravatar
    smittys2
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @smittys2

    Well I never!

    Anyway, I don't think my comment, however jerky or stoogey, rises to the level that it DESERVES AN ALL CAPS REPLY. Caps lock key stuck?

    Seriously though, I notice you didn't disagree that IE is a big pile of S***.

    I will retract one thing though - People who use IE *do* sorta deserve to be hacked. I was being too generous before.
    ZDNet Gravatar
    stooge51
    9th Jun
    • Flagged
  • Good for you.
    @stooge51
    The fact is, I, much unlike you couldn't be paid to use any other browser then IE. And I have them all, I ALWAYS give each of them a fair try again when supposed new and improved versions show up. None of them can ever cut it.

    Every other browser just seems to be a poor mans imitation of IE with ad ons and goo-gaa's stuck in there to try and prove that because there is some kind of difference it makes them better. No, it doesn't make them better. Not as well laid out and sometimes having a feeling like I'm using a piece of cheap junk.

    And yes, I know many many people, both at work and for personal use who use IE all the time and again, unlike you, they are not getting hacked and have been running fine without incident for years.

    I can say that for a very long time now IE when running with a reliable free AV program has felt rock solid. I go wherever I want on the net and even go directly to places I suspect are trojan loaded pages and AVG blocks them like magic. Whenever I read about someone spewing off about how they find IE or a family member or friends IE clogged up with viruses, trojans etc. I do really have to ask, what god awful ridiculous thing did these people do when I cant get any malware even when try.

    Does anyone suspect that these people might be exaggerating ...just a little?
    ZDNet Gravatar
    Cayble
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @Cayble

    As stated in my reply to goff256, yes, I was indeed exaggerating "just a little", but it does cause me a lot of headaches, even though I use it only when I have no other choice.

    Anyway, to each his own I guess. There's pry things about IE that you really like that I really hate, but on the whole I can't imagine IE is really as great as you think it is, based on my own experiences

    As for other browsers imitating IE.... seems to me that IE has copied a ton of features from other browsers in the past couple of years. What has IE done recently that was so fantastic that chrome and firefox copied it? Isn't stealing other people's ideas Microsoft's M.O.?

    As for hacking, I don't doubt you can use IE all the time without problem. We all know that it?s *usually* the user, not the software, that is the cause of infections. But, with over a decade of experience with Microsoft products under my belt, I've never had much confidence in their security.

    Anyway, I was an IE user many years ago and it was decent. Then there was a time when it honestly was a big pile of crap and I kicked it to the curb. Every so often I?ll check out newer versions and they never impress. I admit it?s improved over the past few years, but I still hate it when I have to use it at work, and I disagree with you on its merits?. But hey, whatever floats your boat!
    ZDNet Gravatar
    stooge51
    9th Jun
  • RE: Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office
    @Cayble So, Safari is "a poor mans imitation of IE with ad ons and goo-gaa's stuck in there to try and prove that because there is some kind of difference it makes them better."

    No, that's right, you obviously haven't used Safari

    Oh, and there's an apostrophe in a possessive noun.
    ZDNet Gravatar
    Graham Ellison
    9th Jun
  • IE = CRAP
    @Cayble
    what a joke of a browser, the most amazing thing is there are people making excuses for MS and trying to pretend that IE is on par with the vastly superior competitor products (Safari, FF, Chrome, Opera)
    ZDNet Gravatar
    theo_durcan
    10th Jun

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
Click Here

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources