Microsoft Issues Critical Fixes to Windows, Apps

Following the release of Windows Vista Service Pack 1 and Windows Server 2008, Microsoft is serving up a number of fixes for both operating systems, as it has issued eight security bulletins covering a total of 10 vulnerabilities. Five of the eight are labeled as Critical, the most important of fixes, while three are labeled Important, the next level of severity. Two patches affect Office, four affect Windows across all versions and the final two are related to Internet Explorer.

One of the more significant fixes, as noted by security firm McAfee, is MS08-021, which fixes two vulnerabilities in Windows that would allow an attacker to take control of a PC through specially crafted Windows metafiles, using the WMF or EMF formats. McAfee noted that similar vulnerabilities were exploited in cyber attacks two years ago, forcing Microsoft at the time to rush out to fix its monthly patch cycle.