Thursday, 17 May 2012
Microsoft set to fix 25 vulnerabilities
Microsoft set to fix 25 vulnerabilities
By Robert Westervelt | Apr 12, 2010
0 comments
Digg
PrintMicrosoft plans to release 11 security bulletins April 13, repairing 25 vulnerabilities in Windows, Microsoft Office and Exchange.
In its patch Advance Notification Service, Microsoft said five of the bulletins are rated critical. The 25 vulnerabilities affect all versions of Windows, including the latest version, Windows 7.
Jerry Bryant, senior security communications manager for the Microsoft Security Response Center, said the software giant will address two publicly known issues. A VBScript issue with Internet Explorer will be repaired. An advisory on the issue was issued March 1. The flaw could allow an attacker to run arbitrary code by tricking a user to browse to a malicious Web page and press the F1 key to access Windows Help files in Internet Explorer.
A denial of service vulnerability in the Server Message Block (SMB) protocol will also be addressed, Bryant said.
Microsoft issued an emergency bulletin March 30, repairing a zero-day vulnerability in Internet Explorer and nine other IE fixes. The zero-day vulnerability affected IE 6 and 7 and was being publicly targeted in the wild. The other fixes rolled into the bulletin address remote code execution and information disclosure flaws. Most were critical, including three Internet Explorer 8 vulnerabilities.
This article originally appeared on SearchSecurity
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
