Microsoft to release DirectShow patch next Tuesday

Microsoft to release DirectShow patch next Tuesday

Microsoft has announced that on next Patch Tuesday, the 14th July, it will release six security updates, one of which will probably be a patch to close the current DirectShow holes. This is at least the plan given by Jerry Bryant of Microsoft's Security Response Team. According to Bryant, the developer team is working around the clock and believes that it will be able to release an update of appropriate quality for broad distribution by Tuesday. As a temporary workaround, Microsoft recommends that users download and run the Fix it tool.

Two further updates will close other critical holes in Windows and an update for Microsoft Office Publisher 2007 will close a remote exploit vulnerability. Redmond also plans to fix privilege escalation issues in Internet Security and Acceleration Server 2006 (ISA) and various versions of Virtual PC and Virtual Server.

See also:

Microsoft knew about the DirectShow vulnerability a year ago - Update, a report from The H.
Microsoft issues quick fix for critical vulnerability in DirectShow, a report from The H.
Web pages infect Windows PCs via new DirectShow hole, a report from The H.

Heise security - http://www.h-online.com/security/Microsoft-to-release-DirectShow-patch-next-Tuesday--/news/113732