It’s That Time……Again!!!

Tomorrow is the 2nd Tuesday of the month again, the day in which Microsoft releases it’s monthly updates to Windows and other Microsoft products. However, according to the Microsoft Security Advanced Notification Bulletin, in comparison to last month’s update, this month’s release will be quite small. In all, a total of two bulletins with patches for 8 vulnerabilities afflicting Windows and the Office Suite of products is what will be patched. The updates are regarded, by Microsoft, to be ‘Important” and everyone is urged to employ the updates as soon as possible.

However, the vulnerability that effects Microsofts VBScript will not be fixed with this update. The vulnerability is explained in Microsoft’s Security Advisory (981169). The vulnerability effects the way that Microsoft’s VBScript (Microsoft’s version of JavaScript), in Internet Explorer,  interacts with Help. This vulnerability can cause the execution of arbitrary code on a logged in users computer, simply by coaxing the user to press the F1 key. Microsoft says that when they fully investigate this vulnerability, they can then determine the proper course of action, which may include a monthly update or a possible out-of-sequence update. Currently there are no known exploits in the wild. This vulnerability does not effect computers running Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008.

So make sure that your Automatic Updates are turned on or plan on running your manual updates tomorrow. Sometime after 11:00 AM EST tomorrow, you should be seeing the updates on your computer.