Average Rating: Rate this article:

Ho-Hum Patch Tuesday Missing IE Zero-Day Fix By Jennifer LeClaire January 9, 2013 10:32AM     This Patch Tuesday may be average, but that doesn't mean it'll be an easy one for IT. There are a lot of restarts and they affect nearly all Windows operating systems. That's what security analyst Paul Henry told us. He also found it interesting, but not surprising, that Microsoft was still working on a fix for the Internet Explorer zero-day vulnerability.   Related Topics Microsoft Windows Patch Tuesday Enterprise Security Latest News Oculus VR Gets Huge Funding Boost Huawei Phone Is a Quarter-Inch Thin Yahoo, Apple Disclose Data Requests Free Video Messaging Comes to Skype Prism's Secret: Bigger Data Seizure Microsoft on Tuesday launched its first patches for 2013. The release offered seven security bulletins. Two are rated critical and five are rated important. Andrew Storms, director of security operations for nCircle, said the XML bug should be at the top of everyone's "patch immediately" list. That, he said, is because this bug is going to be a popular target for attackers. "If you can't do anything else right away, at least patch this one post haste," Storms told us. "This critical XML bug affects every version of Windows in one way or another because XML is used by a wide range of operating system components." More Attacks Coming Storms also pointed to an interesting bug in Microsoft's print spooler this month. Print spooler bugs played a role in the infamous Stuxnet malware, but Storms said this bug isn't anything like the vulnerability Stuxnet exploited. "This bug requires a watering hole-style attack method, so it'll be pretty popular in attacker forums," Storms said. "This bug should also be patched pronto. Security researchers have confirmed that they can bypass the just released fix-it for the new IE zero-day bug. This news, combined with the fact that attack code for the basic exploit has already made its way into popular toolkits, is not good." Storms predicted IT would continue to see an increase in attacks until Microsoft releases a patch for this flaw. He said it wouldn't surprise him to see an out-of-band patch in the next two weeks for this. As he sees it, this doesn't bode well for 2013, as Microsoft only released one out-of-band patch in all of 2012 and only one in 2011. Boring Patches Tyler Reguly, technical manager of security research and development, reminded us that in many years past Microsoft has started the New Year off with a bang. The patch of the year in 2010 was OpenType Font Code Execution, and the SMB Remote Code Execution was first in 2009. And it was TCP/IP Remote Code Execution that made headlines in January 2008. "The last couple of years have had relatively boring 001 patches, and this year is no different. MS13-001 is assigned to a vulnerability affecting the print spooler. The print spooler itself isn't directly involved; it's third-party products that query it," Reguly said. "Cross-site scripting (XSS) is part of the inaugural Patch Tuesday of 2013. In the past, patching one XSS in a product for Microsoft has often led to other XSS flaws being discovered that year, so this may be the start of a 2013 trend. Instead of SharePoint XSS patches, this may be the year of SCOM XSS patches." (continued...) 1  |  2  |  Next Page >   Tell Us What You Think Comment: Name: Also Visit: iPad Info Center Billions of Bytes Mobile Device Now Apple Info Center TopTechWire.com Forrester Research Inc., Report from AT&T: As employees bring a wide range of devices to work, 54% of companies are turning to Bring-Your-Own-Device programs. The result: rising productivity, efficiency, and even morale. But can the obvious benefits justify the hidden costs and challenges? Find out by clicking here.  Microsoft/Windows 1.   Free Video Messaging Comes to Skype 2.   Judge in Microsoft Antitrust Case Dies 3.   MS, Facebook Tell of Security Requests 4.   MS Office 365 for iPhone Hits Market 5.   One IE Patch, But 19 Vulnerabilties MS, Facebook Tell of Security Requests Thousands of records were sought. Average Rating: Judge in Microsoft Antitrust Case Dies Presided over historic lawsuit, ruling. Average Rating: MS Office 365 for iPhone Hits Market But not on iPad; some issues reported. Average Rating:

Product Information and Resources for Technology You Can Use To Boost Your Business BYOD & MDM   Forrester Research Inc., Report: BYOD from AT&T. Make everyone more efficient. CRM Systems   How Microsoft Dynamics helped mobilize retail businesses   2 million CRM success stories and counting...   Experience CRM and Business Success today with Salesforce.com. Contact Centers   Unlock the potential in your people with Microsoft Dynamics   Improve your customer relationships with Microsoft Dynamics Customer Data   See how you can benefit from Microsoft Dynamics Customer Service   Improve your customer relationships with Microsoft Dynamics   2 million CRM success stories and counting...   Unlock the potential in your people with Microsoft Dynamics   Make customer support easy with Desk.com customer support solution   Improve your customer relationships with Microsoft Dynamics Data Security   Simpana® 10 software: an exponential leap forward E-Commerce   Make customer support easy with Desk.com customer support solution Enterprise Hardware   The 2013 Toughpad™ tablets. Rugged, secure and built for business.   The best document scanner for you? Try KODAK's scanner selector   APC makes it easy for you to focus on business growth, not downtime. Enterprise I.T.   Brocade's mission: Making networks easier to deploy, manage, and scale.   11 Challenges Solved by Infrastructure for Small IT Environments Enterprise Software   Get critical data off paper and into SharePoint! Watch the video.   Simpana® 10 software: an exponential leap forward Hardware   The 2013 Toughpad™ tablets. Rugged, secure and built for business.   Rugged and reliable Panasonic Toughbook® mobile computers   The best document scanner for you? Try KODAK's scanner selector Innovation   The best document scanner for you? Try KODAK's scanner selector   Brocade's mission: Making networks easier to deploy, manage, and scale.   The best document scanner for you? Try KODAK's scanner selector Laptops & Tablets   Panasonic Toughbook® mobile computers are built to keep you running. Mobile Tech   Panasonic Toughbook® mobile computers are built to keep you running.   Rugged and reliable Panasonic Toughbook® mobile computers Small Business   The best document scanner for you? Try KODAK's scanner selector Tech Trends   APC makes it easy for you to focus on business growth, not downtime.

Enterprise Hardware Spotlight

Samsung Offers Tiny, Superfast PCIe SSDs for Ultrabooks Solid-state drives are continuing their march forward. On Monday, Samsung Electronics announced it has started to mass produce the first PCI-Express 3.0 SSDs for the new wave of Ultrabooks.   Amazon.com Joins 3D Printer Craze, Enabling Wide Availability Commercially available 3D printers have recently moved from being expensive hobbyist devices to being pricey but accessible consumer and manufacturing machines. And now, Amazon.com will sell 3D printers & supplies online.   New Facebook Data Center Uses All Home-Grown Servers Facebook has opened its new data center in Lulea, Sweden. The data center is a first in two ways: the first in Europe and the first to be equipped with all Facebook-designed, Open Compute servers.

Mobile Enterprise Spotlight

Why Google's Project Loon is Smart Business Google is once again proving that it's much more than a search engine or even a mobile-device company, with Project Loon. The initiative aims to bring "balloon-powered Internet" to isolated areas of the world.   Authorities Want Smartphone 'Kill Switch' To Fight Thefts Law enforcement authorities are calling on the smartphone industry to adopt "kill switch" technologies that would deter theft by squeezing the market for selling stolen devices, which would be worthless if "bricked."   Small Business Gets Boost from Mobile Marketing Aside from the requisite e-commerce tricks, small businesses are turning their attention to the mobile arena to engage social media-savvy customers, as mobile marketing tools offer more channels.

Enterprise Technology Spotlight

New Facebook Data Center Uses All Home-Grown Servers Facebook has opened its new data center in Lulea, Sweden. The data center is a first in two ways: the first in Europe and the first to be equipped with all Facebook-designed, Open Compute servers.   Cisco Telecom Router Ready for Internet Traffic Flood The Carrier Routing System-X unveiled by Cisco for the telecommunications industry is a 400 Gbps per slot system that can be expanded to nearly 1 petabit per second, enough to deal with the coming flood in demand.   HP's IT in a Box Targets SMBs by Using Google Apps Hewlett-Packard is partnering with Google on HP SMB IT in a Box, which it bills as a "one-stop shop" solution for small and medium business customers. The move is likely to ruffle Microsoft's feathers.

Navigation NewsFactor Network Home/Top News | Enterprise I.T. | Cloud & Virtualization | Applications | Unified Communications | Mobile Tech | Hardware | Business Intelligence World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech Press Releases NewsFactor Network Enterprise I.T. Sites NewsFactor Technology News | Enterprise Security Today | CRM Daily NewsFactor Business and Innovation Sites Sci-Tech Today | NewsFactor Business Report NewsFactor Services FreeNewsFeed | Free Newsletters | About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise Privacy Policy | Terms of Service © Copyright 2000-2013 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.