Security administrators should have a pretty easy time of it next Tuesday as Microsoft says it will issue just two updates in its monthly security software release. Microsoft said Thursday that next week"s updates will include a critical update for the Windows operating system as well as a less-serious "important" Windows update.
Microsoft has been working on a fix for buggy antipiracy that has been shipping with Windows for the last few years and security experts believe that this will be one of the flaws fixed next week. The bug lies in the secdrv.sys driver built by Macrovision that ships with Windows XP, Server 2003, and Vista, but Vista is not vulnerable to the problem, according to Microsoft. The software vendor is aware of "limited attacks" that exploit this vulnerability to get elevated privileges on a victim"s machine.