Thursday, 17 May 2012
Microsoft addresses Windows and Office vulnerabilities
Microsoft addresses Windows and Office vulnerabilities
By SearchSecurity.com Staff | Mar 10, 2010
0 comments
Digg
PrintAs part of its security bulletin advance notification for March, Microsoft revealed Thursday that it will release two bulletins that will address eight vulnerabilities.
The bulletins, each labeled "Important" by Microsoft, will affect Windows and Microsoft Office products.
The security updates will be released Mar. 9 in the software giant's usual monthly Patch Tuesday cycle.
According to a post on the Microsoft Security Response Center (MSRC) blog from Jerry Bryant, senior security communications manager for the MSRC, the upcoming patches will address vulnerabilities that would "require a user to open a specially crafted file." There are no network-based attack vectors, added Bryant.
Bryant also noted that Microsoft is continuing to monitor a VBScript remote code execution vulnerability, disclosed earlier in the week. The VBScript advisory claims that no attacks are known currently, and according to Microsoft, the vulnerability cannot be exploited on Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008. Customers are encouraged to apply workarounds.
This article originally appeared on SearchSecurity
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
