Microsoft released 13 security patches for the first time involving Windows7

This morning, Microsoft released 13 security patches to fix 34 security flaws in products including the Windows 7 operating system that has not yet been officially released. At the same time, 13 security patches also set a new record for the number of patches released by Microsoft in a single day.

Microsoft said that the patch released today affects Windows, IE, Silverlight, Office and other products. Six of the 13 patches are “emergency” and users should install these patches immediately.

For the security flaws of Windows 7 that have not yet been officially released, Microsoft may be embarrassed. Microsoft has always hoped that Windows 7 will sweep Vista's bad impression on users. A Microsoft spokesperson did not confirm whether the company found more Windows 7 security flaws. Microsoft usually does not disclose security flaws before releasing patches.

McAfee senior researcher Dave Marcus said that the security flaws in Windows 7 are quite serious, but it's not surprising. "As long as it's code written by people, there will be flaws." "

Microsoft Security Bulletin Summary (October 2009):

1. Announcement Number: MS09-050

Knowledge Base Number: KB975517

Bulletin Summary: Fix a public disclosure and two privately reported vulnerabilities in Server Message Block Version 2 (SMBv2). The most severe of these vulnerabilities could allow remote code execution if an attacker sends a specially crafted SMB packet to a computer running the server.

Maximum Security Level: Critical

Scope of Influence: Windows Vista SP2/Server 2008 SP2 (The 32/64-bit version of the corresponding system is included unless otherwise specified)

2. Announcement No.: MS09-051

Knowledge Base Number: KB975682

Announcement Summary: Fix two privately reported vulnerabilities in Windows Media Runtime. These vulnerabilities could allow remote code execution if a user opens a specially crafted media file or receives specially crafted streaming content from a website or any application that provides web content.

Maximum Security Level: Critical

Scope of Influence: From Windows 2000 SP4 to Windows Vista SP2/Server 2008 SP2

3. Announcement No.: MS09-052

Knowledge Base Number: KB974112

Announcement Summary: Fix a privately reported vulnerability in Windows Media Player. The vulnerability could allow remote code execution if a specially crafted ASF file is played using Windows Media Player 6.4.

Maximum Security Level: Critical

Scope of Influence: WMP 6.4 on Windows 2000 SP4/XP SP3/Server 2003 SP2