|
Patch Tuesday Security Briefing
Last month it poured when Microsoft released 17 security bulletins that addressed a total of 64 vulnerabilities. For today's Patch Tuesday, we have a light load; however, both patches address remote code execution and one is critical. So both require immediate attention. The critical patch MS11-035 Vulnerability in WINS addresses an issue with all supported versions of Windows server - 2003, 2008 and 2008 R2 and exposes the server to a remote code execution attack and should be a high priority if you're running any of the Windows server platforms. The second issue MS11-036 Vulnerability in PowerPoint addresses an issue in Microsoft PowerPoint for Microsoft Office for the Windows environment XP, 2003 and 2007 however Office 2010 is not impacted. Important to note that also impacted is Microsoft Office for the Mac.
Of further note are the recent changes to the Exploitability Index, which now reflects the likelihood of a vulnerability becoming the subject of an attack in the next 30 days. In addition, there is a new component called the "Denial of Service Risk Score" that can be used to determine the risk of a vulnerability becoming the subject of a Denial of Service attack. More details on the changes ...Read More »
|