Microsoft releases patches to fix 20 Windows flaws, some ‘critical’

“Microsoft Corp. today released four new security bulletins detailing patches for several critical vulnerabilities, including one that fixes 14 separate flaws, in a wide range of Windows software. The patches are part of the company’s monthly rollout of security fixes and address a total of 20 flaws. The products affected by the flaws include Windows NT Workstation and Server, Windows 98, Windows XP, Windows 2000 and Windows Server 2003,” Jaikumar Vijayan reports for ComputerWorld.

“The patch detailed in Microsoft Security Bulletin MS04-011 is one of the biggest software updates the company has released in terms of the number of flaws it addresses,” Vijayan reports. “A total of 14 vulnerabilities are addressed in the update, some of which are critical, said Stephen Toulouse, security program manager for Microsoft’s Security Response Center. In some cases, the patch addresses holes that are critical in some products but aren’t as serious in others, Toulouse said.”

Full article here.

Related MacDailyNews article:
OSNews: ‘Windows has become a liability; users owe it to themselves to try Mac OS X’ – April 12, 2004

35 Comments

  1. Bora, yep, if you keep a vanilla Windows installation and you refrain from installing 3rd party products, avoid surfing too much without care, then Windows can be stable. It is when you start using it freewheeling that things downgrade pretty fast.

    But then it is all perspective: my colleagues with Windows call their system stable in that it crashes on them once a week on average. Another found that by shutdown it daily crashes are at bay.

    I call that an amazingly fragile OS, but again, it is all perspective.

  2. and concerning MS fixing problems: in some cases it took over 200 days since the flaw was public (that means MS failed to keep it secret).

    Now, 200 days… how many developers do they have on the issue? 3?

    PS
    and fixed… you mean for those where the update does not simply freeze XP up and miraculously installed. Pathetic, but wait, this is normal for MS products right? After all all these problems and viruses, worms, ports invasions, spyware, adware and the rest are a thing of computers, right?
    ROFLMAO

  3. Another article: http://www.computerworld.com/securitytopics/security/story/0,10801,92013,00.html?nas=OS-92013

    Bora, congrats on getting started! It really is far more stable and secure than m$. In honesty, most operating systems are. That’s why we’re amazed at the number of people who don’t switch. An IT friend recently told me over lunch that he likes the fact that m$ isn’t too stable, it keeps him busy. He likes the problems that are too difficult for someone (me) in the office to fix, but aren’t too much of a headache for him. On the user side, I’d much rather have my system stable so I don’t need to call him. My mom and brother have both had to have him in their homes to fix problems. My in-laws depend on me to fix problems. I’ve never called anyone to look at my Mac (in almost 10 years of use).

  4. Bora “Nobody robs Fort Knox, but people rob liquor stores and small banks often enough and they’re widespread”

    exactly but not because they are widespread, they get robbed because all you need is to bring a brick and smash Windows (pun intended).

    Big banks are much smaller in number but the same guy who can smash&grab; has no chance against one of them, even if he knows where they are. The analogy is perfect: petty thieves are also the majority with respect to the genius criminal who can go after Crown Jewels. Again, little to do with visibility: petty thieves do not even try after those jewels but they pretty much would like to have the capabilities.

    If they had they would: cracker contest give the highest prize to whoever cracks an OS X machine. None has yet claimed it: capish?

  5. Bora, glad you liked them. Maybe you know the “The Thomas Crown affaire”, both the original with Steve McQueen and the remake with Pierce Brosnam.
    Think about it…

    Nobody says OS X (or BSDUnix) is invulnerable, far from it, but you need Thomas Crown to get into and he does not really have any interest in making damages. The petty thief at the 7-11 would not think twice to shoot the cashier and run with $200 (or crack into Windows with a little virus and delete files just for fun and brag with friends at a FPS session).

  6. sputnik:

    MS sure does a lotta fixin’. That’s great! I hope you can download all the patches MS could of or should of already written into Windoze.

    Windows the world’s largest sustained beta project for an OS ever!

  7. Hmm, all the posts here are interesting..It seems that a lot of you havent done any homework when it comes to security updates. Yes, MS released multiple fixes in one download. Maybe they took a tip from Apple. Here is a breakdown of Mac (AllInOne) updates. Apple has had over 80 vulnerabilities and Windows XP Pro had 54 Vulnerabilities since Jan-01-2003

    04-07-2004 apple update
    CAN-2004-0079
    CAN-2004-0110
    CAN-2004-0112
    CAN-2004-0382
    CAN-2004-0383
    All in one patch
    02-25-2004 apple update
    CAN-2003-0989
    CAN-2004-0055
    CAN-2004-0057
    CAN-2004-0164
    CAN-2004-0165
    CAN-2004-0166
    CAN-2004-0167
    CAN-2004-0168
    CAN-2004-0169
    All in one patch
    01-27-2004 apple update
    CAN-2003-0542
    CAN-2003-0789
    CAN-2004-0085
    CAN-2004-0086
    CAN-2004-0087
    CAN-2004-0088
    CAN-2004-0089
    CAN-2004-0090
    CAN-2004-0092
    Thats 23 Vulnerabilities in 3 months 31 for the year..

    Troll Buster is either
    A) A Flamer with over 31 fingers
    B) Only Counts the updates from apple that come from software update. Which are usually one update for multiple vulnerabilities.
    C) Just can’t count

    Go here to access the info that I pulled

    http://secunia.com/product/96/ (MacOS)
    http://secunia.com/product/22/ (WinXP)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.