July 2005 Security Updates

July 2005’s “Patch Tuesday” included three critical patches for vulnerabilities in Microsoft software. The bulletin for a Java component in Windows and Internet Explorer (IE) replaces a security advisory issued when the vulnerability was first reported. (Security Advisories were recently added to Microsoft’s security communications to provide timely information about security issues that don’t warrant an update or that emerge before a bulletin and update are ready.) Despite this transformation, customers must continue to monitor both advisories and bulletins, as not all advisories will become bulletins.

July Patches

Three critical patches in July 2005 fix vulnerabilities in Word, Works, Windows, IE, and Microsoft’s Java Virtual Machine (MSJVM), including the following:

• A patch for an unchecked buffer in Word’s font-processing software (Word is included in the Works suite)
• A patch for an unchecked buffer in the Microsoft Color Management Module, which allows the OS to provide consistent