Microsoft forces update for MSN Messenger issue, leaves patching three others to you.
Tuesday September 11, 2007 at 1:51 pm CST
Posted by Monty Ijzerman
Today Microsoft patched four vulnerabilities. You will have no choice other than to accept the patch for the vulnerability in MSN Messenger since the service is not available otherwise. This particular vulnerability was disclosed back in January so attackers did have time to exploit it but we never became aware of any active exploitation.
Of the remaining three vulnerabilities, the one in the Windows Agent is rated critical but only affects Windows 2000 SP4. The other two vulnerabilities, both rated important, relate to a Crystal Reports component in Visual Studio and to Windows Services for Unix.
Think this month was boring? Look at the graph below. Traditionally the month of September contains fewer patches to be followed by an up tick in the Fall so stay prepared!


September 12th, 2007 at 8:28 pm
how can it be possible, why the heck is msn forcing us to update?!!!
October 3rd, 2007 at 2:49 am
Hmm… Low number of September patches follow the US holiday season. Coincidence?