Jun 13, 2011

Microsoft gearing up for disruptive Patch Tuesday

Microsoft appears to be gearing up for a disruptive Patch Tuesday next week.
The software giant’s advance notice, released earlier today, shows a total of 16 bulletins. The majority of the bulletins released are labeled “critical,” the highest rating the company gives. The remaining seven bulletins received an “important” designation.
Of the nine critical vulnerabilities, almost all require a restart and all allow remote code execution if not fixed. Most fixes tend to flaws in the operating system and two patch holes in Microsoft’s .NET framework. The second bulletin addresses a Microsoft Silverlight issue.
The bottom seven saw a similar fare, with most of those bulletins dedicated to fixing vulnerabilities in the Windows operating system; however, two of the important bulletins deal with flaws in Microsoft’s Office software suite of programs.
The important bulletins saw much more diversity in terms of the threats they pose, bulletins 13 and 14 are denial-of-service threats, 10 and 15 are information disclosure threats, 12 and 16 are elevation of privilege threats, and 10 is a remote code execution threat.

No comments:

Post a Comment