Microsoft issues 'critical' security patches
Microsoft Corp. warned Windows users Tuesday of two new "critical" level security flaws in its software that could allow attackers to take control of a computer and delete or copy information.
The world's largest software maker issued patches to fix the problems as part of its monthly security bulletin, which affects the Windows operating system and the Internet Explorer Web browser.
Computer security experts urged users to download and install the patches, available at www.microsoft.com/security.
"It's very critical that users patch machines for these vulnerabilities," said Jimmy Kuo, a researcher at McAfee Inc.'s virus detection center.
A hacker could exploit one of the security flaws if a user directed the Web browser to a specially designed Web page, Redmond, Washington-based Microsoft said.
Microsoft also issued one other security warning, rated at
the second-highest level of "important."
Microsoft has been working for the last three years to improve the security and reliability of its software under its Trustworthy Computing initiative, as more and more malicious software targets weaknesses in Windows and other Microsoft software.