Microsoft's critical patches for servers and desktops

Stephen Withers
Wednesday, 11 February 2009 01:45

IT Industry - Market

The other server-related bulletin explains that remote code execution may occur if untrusted users access SQL Server or if an SQL injection attack occurs.

The privately reported vulnerability is rated as important on SQL Server 2000, 2005 (but not SP3), 2005 Express Edition, Windows Internal Database (part of Windows Server 2003 and 2008) and MSDE 2000.

SQL Server 7 SP4 and SQL Server 2008 are not affected.

Microsoft warns that functional exploit code has been published for this vulnerability.

The final bulletin for this month covers a trio of privately reported vulnerabilities in Visio.

Despite the fact that opening a maliciously crafted document allows remote code execution, this bulletin is only rated important. This is apparently because Microsoft has determined that only an inconsistent exploits are likely.

Visio 2002, 2003 and 2007 are all affected by these issues.

Please read on for more security-related updates from Microsoft.