|
|
 |
|
Patch Tuesday Security Briefing
 In the first Patch Tuesday of 2012, Microsoft has addressed 1 critical issue and 6 important. It’s interesting to note that despite all of the media hype over "The Beast", attacks have simply never materialized and the issue has retained its "Important" classification from Microsoft. Overall, we saw a reduction in the number of critical issues from Microsoft in 2011. To that end, we can anticipate Microsoft will bolster defense-in-depth efforts and will likely increase the numbers of important issues like privilege escalation.
Looking at the details:
- MS12-004
Critical - Corrects a Media Player issue with
remote code execution probability
- MS12-001
Important – Corrects a Windows Kernel issue
- MS12-002
Important – Corrects an Object Packager issue
- MS12-003
Important – Corrects a CSRSS issue
- MS12-005
Important – Corrects a .Net issue
- MS12-006
Important – Slays the Beast by correcting the
underlying related SSL/TLS issue
- MS12-007
Important - Anti-XSS fix
This Patch Tuesday also saw the first use of a new security classification, Security Bypass Feature (SBF). This classification includes exploits that are not directly accessible themselves but could be used to facilitate an attack using another vulnerability (such as turning off UAC, DEP or ASLR before running another exploit). This first SBF patch enhances Microsoft’s SEHOP, or Structured Exception Handler Overwrite Protection to add additional defense-in-depth... Read More »
Join the Beta! L.E.M.S.S. v.7.2
The latest version of our Lumension® Endpoint Management and Security Suite (L.E.M.S.S.) v.7.2 is ready for customer Beta testing. L.E.M.S.S. v.7.2 contains numerous performance improvements, user experience enhancements, and new capabilities in Application Control, Patch and Remediation, and AntiVirus. Join Now.
|
|
|
|
|
|
|
|
|
|
|
|
|
Bulletins
» Critical
» Important
Updates Outside of Microsoft
Outside of Microsoft, here are the updates since the beginning of December:
Adobe Security Content (45 bulletins)
Mozilla Security Content
Real Networks Security Content
Some additional items of note:
- Microsoft released MS11-100 as an Out-Of-Band Security Bulletin on December 29, 2011 related to a .NET Framework Critical Vulnerability
- Mozilla continues to be disruptive to the enterprise as it plans to release Firefox 10 on January 31, 2012, after just releasing Firefox 9 on December 20, 2011
- Adobe is planning to release APSB12-01 on January 10, 2012, with a plan to release fixes for Reader X v10.1.1 and Acrobat X v10.1.1
|
| |
|
|
|