Microsoft is preparing to release a pair of updates next Tuesday

Microsoft is preparing to release a pair of updates next Tuesday.

The company said in an advance notice that the November edition of the 'Patch Tuesday' release will include one fix labeled 'critical' and a second labeled 'important.'
The critical fix addresses a vulnerability in the Microsoft XML Core Services component in Windows 2000, XP, Server 2003, 2008 and Windows Vista. While Microsoft did not disclose the exact nature of the vulnerability, the company said that if exploited it could allow an attacker to remotely execute code on a targeted system.
While the second flaw could also allow an attacker to remotely execute code, Microsoft rated the issue as an 'important' risk. The vulnerability lies within a component in Windows 2000, XP, Server 2003, Server 2008 and Windows Vista.
Microsoft offered little more on the nature of the vulnerability. The company typically refrains from disclosing specific details on a flaw until a fix can be released.
The November update comes just two weeks after the disclosure and patching of another critical vulnerability in a Windows component. Shortly after the company posted the fix, an attack for the flaw was reported.
Microsoft is planning to release the update next Tuesday. The update is typically released by early afternoon US Pacific time.

Microsoft to deliver a pair of November fixes - vnunet.com

 

[Joan Archer]

I'd seen the notice about this, I expect there will also be the monthly Malicious Software Removal tool and I suppose we'll have to wait and see if there are any for Office at the same time

 

[mansrm81]

How many times are we going to download the XML core services fixes.

 

[elbeasto]

Eight times?

 

[DjLevel9]

After all thease attacker Violations I beging to think it's the Employees at Microsoft and the ware house in the usa and canada call centers that are doing this,

My friend worked at the call center and he worked form home for microsoft,
and he was generating freen codes from microsft Look Microsoft trained him how to created and make the software and they did all the testing now so many diffrent version are out some still by pass the system no matter what Microsoft does.

First thing is Microsoft had a year to fix Vista we should not be Charged to used the new version thats not gonna be called vista,if you have a Current Vaild Copy and have the UPS Purches code and the store reciept that should be good enough ..

Lokk at the screw ups in the Call Center In India I got a Teir One Just Like Sympatics Ters there right down the hall from each other in the same Building i found through are Bell Canada compony now offices in the Phillpines now?

and there still not trained propperly to help us with our problems with vista they still can't even read the Techsupport Sheets assigned to them by there team supervisor must be nice to walk off the street no computer experience what so even and be hired I'm a Techsupport person but I dont[ know hoe to shut the computer off and reboot it have to what my boss game me what Microsoft told us to tell the Customer it's true I have all recored conver sations 2 to 3 hours ofrm India To the Phillopines same in each office and there not really even trying

 

[ripbox]

It really puzzles me that all the updates that we get seem to have the same reason
"it could allow an attacker to remotely execute code on a targeted system."
I would really like to question if its its more serious than what they are saying
I'v yet to see an update patch that really means some sort of real fix that we want, ok yes security is important but we don't seem to see fixes for those annoying bugs that we have to put up with on a daily basis

 

[elbeasto]

It really puzzles me that all the updates that we get seem to have the same reason
"it could allow an attacker to remotely execute code on a targeted system."
I would really like to question if its its more serious than what they are saying
I'v yet to see an update patch that really means some sort of real fix that we want, ok yes security is important but we don't seem to see fixes for those annoying bugs that we have to put up with on a daily basis

Ditto!