Microsoft said it will deliver a single security update on Tuesday January 12, 2010 to patch just one vulnerability in Windows. The expected update will patch a vulnerability rated "critical" -- Microsoft's most serious rating in its four-step scoring system -- in Windows 2000.

Microsoft said that it does not yet have a fix for a crippling bug in Windows 7 that went public nearly two months ago when it was first reported by Canadian researcher Laurent Gaffie Nov. 11, 2009. According to Gaffie, exploiting the flaw crashes Windows 7 and Server 2008 R2 systems so thoroughly that the only recourse is to manually power off the computers.

Source: Computerworld