Proactive IT Security
 

Four critical updates for Microsoft systems in March 2008

2008-03-12 [Software advisories]

12 March 2008

In its security bulletin summary for March 2008 Microsoft has published four updates for new critical vulnerabilities in its operating systems / applications (none with less severity).

Critical is Microsoft’s highest vulnerability rating.

A summary describing briefly the vulnerabilities is available from Microsoft’s Security Bulletin Summary for March 2008.
From this page you will also find links to more detailed information in Microsoft's Security Bulletins MS08-014 - MS08-017.

The critical updates address the following issues:

  • Several publicly and privately reported vulnerabilities in Microsoft Excel
  • One privately reported vulnerability in Microsoft Outlook 
  • Two privately reported vulnerabilities in Microsoft Office
  • Two privately reported vulnerabilities in Microsoft Office Web Components

The update for Excel is probably the most crucial as this also addresses vulnerabilities disclosed to the public.

Updates that fixes the vulnerabilities are available from Windows automatic update mechanism for systems that support this. Alternatively, one may download updates from http://windowsupdate.microsoft.com.  

Norman advices all affected users to download the security updates as soon as possible, to be protected from potential exploits.