Microsoft to patch 57 holes

By

Five bulletins target critical flaws.

Microsoft this week plans to deliver a huge security update complete with 12 patches that address 57 vulnerabilities.

Microsoft to patch 57 holes

Five of the 12 bulletins are rated critical, addressing flaws in Windows, Internet Explorer and Exchange Server, according to an advance notification bulletin.

The remaining seven are designated important and deal with issues in Windows, Office, .NET Framework and Server Software.

Catching the eyes of security researchers were two of the critical patches that address vulnerabilities in Internet Explorer, a common vector through which criminals serve malware.

"Internet Explorer patches are always a top priority, and this month we're going to get two Internet Explorer bulletins," nCircle security operations director Andrew Storms said.

"That's unusual because generally, when Microsoft patches IE, the patch is delivered as a single bulletin."

Core Security senior product manager Alex Horan said that because the IE bugs are being patched in all supported versions of the browser and operating system, "it's pretty much one-hack-fits-all in the Windows environment for attackers."

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Log In

  |  Forgot your password?