By Ina Fried, 13 April 2005 09:30
NEWS Microsoft released on Tuesday a slew of security patches, five of them critical, as part of its monthly update.
The updates include "critical" fixes to Windows' TCP/IP networking (the standard behind the internet and other networks), Internet Explorer, MSN Messenger, Office and Exchange. Three other Windows security holes are rated as "important". In each case, Microsoft said the flaws, if exploited, could enable an attacker to take remote control of a vulnerable machine.
In addition to those patches, Microsoft is releasing two high-priority upgrades unrelated to security. One is for the Windows Installer and the other is for the Background Intelligent Transfer Service, which Microsoft uses to allow piecemeal downloading of software updates.
The software maker said last week to expect the eight security patches as well as the other updates, but did not offer details.
In March, the company took a break from its monthly routine of security releases and did not issue any patches. The previous month, Microsoft had a dozen fixes in its release and later plugged a hole in the digital rights technology within Windows Media Player.
Microsoft also revamped its technology for removing malicious code, a sort of basic antivirus tool for cleaning up infections. The software now removes Hacker Defender, Mimail and Rbot, as well as new variants of the Berbew, Bropia Gaobot, MyDoom and Sober worms, the company said.
Ina Fried writes for CNET News.com.

Comments
There are 2 comments. Join the discussion
1. James Liddell
MS released patches on Tuesday, I learn of this on Wednesday and went to look at them since I am on auto download (I thought! That's what the indicators read). Found that I had not received the patches. Found that I already had SP2 auto downloaded. Sort of an irregular performance by MS, wouldn't you say?
Now, I need to go back and see if I didn't auto download the Win Installer and something else or two, as this story refers to eight. Well, one is Messenger which I have disinstalled or otherwise disabled and I certainly don't want THAT again.
2. Rupert
I had the same situation, I had to go to the site and manualy download the updates. What gives?