Microsoft to Patch Six Vulnerabilities with April 2012 Security Update

On April 10th, 2012, Microsoft will deliver a new software update for its products as part of the usual monthly update rollout. 

A total number of six bulletins will be included in the update, four of which are rated critical, and which are meant to patch several security holes that were discovered in various products from the Redmond-based software giant. 

All of the said four vulnerabilities could allow for Remote Code Execution, the company announced via the Microsoft Security Bulletin Advance Notification for April 2012. 

The first of these affects Microsoft Windows and Internet Explorer, the second was discovered in Windows alone, while the third affects both Windows and Microsoft .NET Framework. 

The fourth critical vulnerability meant to be patched next week affects Microsoft Office, Microsoft SQL Server, Microsoft Server Software, and Microsoft Developer Tools. 

A fifth bulletin included in the update, rated Important, patches a security breach that could result in Information Disclosure, and affects Microsoft Forefront United Access Gateway. 

As for the last bulletin in Microsoft’s April 2012 update, also rated Important, it could allow for Remote Code Execution and will resolve a vulnerability found in Microsoft Office.

Specific info on these patches will be delivered only on Tuesday. Also then, Microsoft will issue the official Security Bulletin numbers. The aforementioned advance notification will be replaced by the bulletin summary on that day. 

Along with the said patches, Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

The company plans on hosting a webcast to address customer questions on the security bulletins on April 11, 2012, at 11:00 AM Pacific Time (US & Canada). 

Those who would like to participate can register for it now. Microsoft will also make the webcast available on-demand after that date. Additional details can be found on Microsoft Security Bulletin Summaries and Webcasts.

Posted in: News, Software