Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial Director
on the company's TechNet site.
This follows the software giant's July release of seven security problems and June's release of 13 such bulletins.
More specifically, Microsoft will release 10 Windows security bulletins and two for Office, although it is unclear just how many of the 12 security fixes are critical.
The 10 Windows updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scan Tool, and some updates will require a restart. The two Office updates can be detected using the Baseline Security Analyzer and may also require a restart.
It is likely that one of the Office security patches will be a fix for zero-day PowerPoint flaw that Microsoft said recently was critical enough to merit a fix on or before Aug. 8.
When exploited, it arrives by email as a Microsoft PowerPoint document attachment. After a recipient opens the document, the vulnerability is triggered and attackers can then run malicious code on the affected machine.
It's doubtful any of the patches will address a newly discovered Windows vulnerability involving a NULL pointer dereference error in the server drivers, which attackers can exploit to crash a system using a specially crafted network packet.
As is its monthly practice, Microsoft will release an updated version of its Malicious Software Removal Tool and it will host a webcast Wednesday to answer questions IT administrators may have.
"Although we do not anticipate any changes, the number of bulletins, products affected, restart information and severities are subject to change until released," Microsoft said.