Thursday, 17 May 2012
Microsoft to address several issues in Windows and Office
Microsoft to address several issues in Windows and Office
By Robert Westervelt | Feb 10, 2010
0 comments
Digg
PrintMicrosoft plans to issue a bevy of bulletins next week repairing more than two dozen Windows vulnerabilities across its product line.
In the Microsoft Advance Notification Service issued Thursday, the software giant said five of the bulletins are rated critical and seven bulletins are rated important. One bulletin was given a moderate rating.
According to Jerry Bryant, a senior manager with the Microsoft Security Response Center (MSRC), bulletins repairing flaws in Microsoft Office will not affect users of Office 2007 or Office 2008. The bulletins repair older versions of the software giant's popular productivity software. Bryant said the Office updates were given an important rating.
"We encourage customers to upgrade to the latest versions of both Windows and Office," Bryant wrote on the MSRC blog. "As this bulletin release shows, the latest versions are less impacted overall due to the improved security protections built in to these products."
Microsoft will also address a low-impact Windows Kernel zero-day vulnerability in which the core underlying operating system fails to handle certain exceptions. The vulnerability exists in nearly all versions of Windows. If successfully exploited, the problem could result in freezing or a forced restart of some systems.
The Windows Kernel vulnerability is considered low-impact because an attacker would need valid login credentials and must be able to log on locally to exploit it. Bryant said Microsoft is unaware of any attacks targeting the vulnerability.
Bryant released a Windows bulletin summary table describing the total number of bulletins and their rating for each version of Windows. Four of the bulletins are given a priority rating of 1, the highest priority given to a bulletin.
This article originally appeared on SearchSecurity
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
