Microsoft flags critical patch for Microsoft Office

By Matt Whipp

Posted on 10 Mar 2006 at 11:40

Microsoft has given its customers a heads up on what to expect in next Tuesday's security bulletin.

On 14 March it plans to release a Critical patch for Microsoft Office and another for Windows rated as Important.

It will also supply an updated version of the Windows Malicious Software Removal Tool.

Microsoft does not say exactly which components of its products are at issue. But security company eEye Digital keeps tabs on flaws affecting software and how timely vendors are at fixing them.

The current standard is for a flaw to be addressed within 60 days of reporting. eEye lists one flaw affecting Microsoft's Windows platform that is now 90 days overdue.

It rates this as of Medium risk, with a successful exploit able to cause a denial of service attack.

With luck, this will be fixed with the bulletins Microsoft has planned for Tuesday.