Microsoft releases its Security Bulletin for April 2005
Microsoft Windows Security Bulletin for April reports the release of two patches rated "critical" and three rated "important" to protect users against recently discovered vulnerabilities in Microsoft Windows. In addition, Microsoft Office Security Bulletin for April reports the release of a "critical" patch against a vulnerability in Word and in Works Suite. Patches have also been released against vulnerabilities in other Microsoft products this month, including MSN Messenger. For further details please refer to the technical bulletin Microsoft Security Summary for April 2005.
Of particular note this month are the vulnerabilities reported in Microsoft MSN Security Bulletin for April (MS05-022), a vulnerability in the handling of GIF files in MSN Messenger, and in Microsoft Office Security Bulletin for April (MS05-023), a vulnerability in Microsoft Word. Both of these vulnerabilities could allow for remote code execution on a vulnerable machine and neither of them are automatically patched against through the Automatic Updates mechanism in Windows. To patch against the vulnerability in MSN Messenger reported in MS05-022, users are advised to update to the newest version of MSN Messenger, version 7.0. The patch against the vulnerability in Microsoft Word can be downloaded and installed from the Office Update Page.
Users are advised to patch their systems against these vulnerabilities immediately. Patches can be downloaded via links posted within the appropriate Security Bulletin or by visiting Windows Update and Office Update.
We recommend that users patch their systems by downloading and installing critical Microsoft updates as soon as possible.
Users are also encouraged to update their antivirus software daily and to install a firewall on their computers, if they have not done so already. For more information on firewalls, please read Microsoft's tutorial on how to protect your PC.
Technical summary of April's Security Bulletins
Microsoft Windows Security Bulletin Summary for April
Microsoft Office Security Bulletin Summary for April
Microsoft MSN Security Bulletin Summary for April
Microsoft Exchange Security Bulletin Summary for April
Critical:
- Technical Security Bulletin MS05-019 - [KB893066]
- Technical Security Bulletin MS05-020 - [KB890923]
- Technical Security Bulletin MS05-021 - [KB894549]
- Technical Security Bulletin MS05-022 - [KB896597]
- Technical Security Bulletin MS05-023 - [KB890169]
Important:
- Technical Security Bulletin MS05-016 - [KB893086]
- Technical Security Bulletin MS05-017 - [KB892944]
- Technical Security Bulletin MS05-018 - [KB890859]