November Windows updates released

There are only 2 updates in monthly Windows update package.

First of them is for a critical vulnerability in uri technology (uniform resource identifier). That means situations in which user opens programs by clicking a web link. There have been found situations in which crackers have included on code in those links and tried to get own software to users computer.

That vulnerability is for IE 7 only and it's not in browser itself but in shell32.dll file. Same vulnerability was fixed in Firefox already in summer.

Second update is for vulnerability in Windows DNS Server service in Windows 2000 Server and Windows Server 2003 operating systems. This spoofing vulnerability could allow an attacker to send specially crafted responses to DNS requests, thereby spoofing or redirecting Internet traffic from legitimate locations.