Stephen Withers
Wednesday, 10 February 2010 09:52
Business IT -
Security
Page 1 of 3
Microsoft has issued a baker's dozen security bulletins covering 26 vulnerabilities in Windows and Office.
As expected, Microsoft has released a slew of security bulletins and associated patches this month. All currently supported versions of Windows are affected by at least one vulnerability, as are Office XP, 2003 and 2004.
Five of the Windows bulletins are rated critical.
They concern vulnerabilities in the SMB client, Windows Shell Handler, ActiveX controls, the TCP/IP stack, and DirectShow. Each of these could allow remote code execution.
Another five Windows bulletins are rated important.
They involve Windows Server Hyper-V (denial of service), Windows Client/Server Run-time Subsystem (elevation of privilege), SMB Server (various issues, including the potential for remote code execution), Kerberos (denial of service), and the Windows Kernel (elevation of privilege).
More on the Windows and Office patches on
page 2.