Microsoft delivers critical fixes for Windows, IE and Excel

Everything but the kitchen sink

32 Reg comments Got Tips?

Microsoft's monthly patch fest for August included fixes for 14 security holes, including critical flaws in Internet Explorer, Excel and in Windows components such as XML Core Services, Vector Markup Language and Object Linking and Embedding automation.

Six of the nine bulletins issued as part of this month's Patch Tuesday were labeled "critical," Microsoft's highest severity rating. They covered a total of eight flaws. The remaining six flaws were included in bulletins rated "important."

All three IE flaws permitted the remote execution of code simply by visiting a maliciously crafted website. A separate, critical hole in the XML component also made it possible to hijack a machine by luring IE users to the bad sites.

If the hole described in VML, an XML language for rendering vector graphics, sounds eerily familiar, there's a reason. Last fall, criminal hacker gangs exploited separate flaw in the same part of Windows to infect an untold number of machines with malware, forcing Microsoft to release an emergency patch.

Software containing the security bugs included Windows Vista, IE 7 and Office 2007, all three of which were built from the ground up using new security guidelines designed to fortify the programs against attacks. In some cases, those programs proved more resilient than their predecessors against the flaws patched today. (For example, Vista was immune against the both the OLE and GDI bugs.)

Their inclusion on today's list means we're almost sure to see them again soon. ®

SUBSCRIBE TO OUR WEEKLY TECH NEWSLETTER


Keep Reading

When the chips are down, thank goodness for software engineers: AI algorithms 'outpace Moore's law'

ML eggheads, devs get more bang for their buck, say OpenAI duo

Comcast-owned Brit telco Sky to hire 1,000 new staffers, half of them engineers

Bumps up engineer total for UK & Ireland to 4k - but is that enough?

Google settles a four-year age-discrimination battle with 227 engineers by dishing out... $11m

Is that 'Googley' enough for you?

Cogent cut off from ARIN Whois after scraping net engineers' contact details and sliding them to sales staff

And the techies are almost universally very happy about it

Looking for a new tech gig? Engineers, developers, and Atlassian admin sought – more details inside

Job Alert Send us your open positions and we'll run them for free right here on The Reg, no catch

Looking for a new IT gig? Here are vacancies around the world for developers, cloud engineers, infosec analysts, Jira admin, and more

Job Alert Advertise your open positions here for free, no catch, and find opportunities within

Huawei to the danger zone: Now Uncle Sam slaps it with 16 charges of racketeering, fraud, money laundering, theft of robot arm and source code

Updated CFO – and daughter of founder Ren Zhengfei – Meng Wanzhou named in fresh criminal indictment

Steve Jobs, executives shot down top Apple engineers' plea to design their own server CPU – latest twist in legal battle over chip upstart Nuvia

Techies quit to go it alone, iGiant tries to lure away their staff – then sues – court told

Biting the hand that feeds IT © 1998–2020