MS-DEFCON 2: Get patched, then shut down Auto updates – fix for the Help 0day coming

Microsoft has announced that it will deliver four security bulletins on Tuesday July 13.

Three of them don’t appear to be terribly interesting, but one of them must be. Quoth Microsoft:

We are also closing Security Advisory 2219475 (Vulnerability in Windows Help and Support Center Could Allow Remote Code Execution) with a comprehensive update that addresses the issue currently under attack.

Looks like MS is finally going to plug the security hole I talked about a week ago. I’m still not convinced it’s a Big Deal, but it’ll be nice to get it fixed.

Get all of the MS patches applied, except the .NET patches, then make sure you have Automatic Updates turned off. Let’s see what Tuesday will bring.