Microsoft’s Next Tuesday Update

This week when Microsoft does it’s Tuesday patch update, it will contain fixes for two flaws, one deemed critical for Office and a windows patch marked as important.

On 14 March 2006 Microsoft is planning to release:

Security Updates

One Microsoft Security Bulletin affecting Microsoft Office. The highest Maximum Severity rating for this is Critical. These updates may require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scanning Tool.

One Microsoft Security Bulletin affecting Microsoft Windows. The highest Maximum Severity rating for this is Important. These updates will not require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.

Microsoft Windows Malicious Software Removal Tool

Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.

Note that this tool will NOT be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

Microsoft will not release any NON-SECURITY High-Priority Updates for Windows on Windows Update (WU) and Software Update Services (SUS).

Microsoft will release one NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

From News.com:

Microsoft rates as critical any security threat that could allow a malicious Internet worm to spread without any action required on the part of the user. Problems deemed “important” could be exploited to compromise the confidentiality, integrity or availability of data, or the integrity or availability of processing resources, according to the company.

Microsoft’s notice did not specify which components of Windows or Office are being repaired with Tuesday’s patches or how many flaws the update will tackle. Security researchers with eEye Digital Security list one vulnerability on their Web site for which a fix is considered overdue.