Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home Enterprise I.T. Cloud & Virtualization Applications Unified Communications More Topics...
Build Apps 5x Faster
For Half the Cost
Enterprise Cloud Computing

On Force.com
Wireless Security
Get paper data into SharePoint!
Average Rating:
Rate this article:  
Microsoft Patch Tuesday Brings Critical Fixes, Also for Surface
Microsoft Patch Tuesday Brings Critical Fixes, Also for Surface

By Jennifer LeClaire
November 9, 2012 9:19AM

    Bookmark and Share
With another Microsoft Patch Tuesday on the way, we asked security and forensic analyst Paul Henry what IT admins and Windows users need to know. Expect a disruptive Patch Tuesday. "With 6 Microsoft bulletins, 4 of which are critical and some restarts required, along with a host of other issues, IT can expect a disruptive Patch Tuesday this month."
 



(Page 2 of 2)

"If these fonts are embedded in a browser or a Word document, for example, it's rendered in the kernel mode driver and winds up becoming a kernel mode exploit. An authenticated, low-rights user could visit a Web site, the font gets rendered, and it gets rendered as 'system.' This is a very effective attack mode, so Microsoft likes to close out font issues quickly. This is as high a priority as Bulletin 1. Those two bulletins will be the two biggest attack vectors in this batch."

Bulletin 2 addresses two vulnerabilities that are critical remote code executions. This is a Briefcase issue, where you have mapped drives with Briefcase, and Henry classifies it as high priority. Meanwhile, Bulletin 4 affects .Net and fixes Bulletin 5 vulnerabilities in the .Net framework. Bulletin 6 is an Excel vulnerability.

"Bulletin 3 is a moderate update for IIS, which could cause concern. But this is an information disclosure issue via FTP only, so it's only a concern if you have IIS set up to provide FTP services," Henry said. "It's moderate, which typically means attackers have to authenticate to pull off the attack. And we all recognize if they can authenticate, they pretty much own the machine anyway."

< Previous Page  |  1  |  2

 

Tell Us What You Think
Comment:

Name:

Product Information and Resources for Technology You Can Use To Boost Your Business

Enterprise Hardware Spotlight
Samsung Offers Tiny, Superfast PCIe SSDs for Ultrabooks
Solid-state drives are continuing their march forward. On Monday, Samsung Electronics announced it has started to mass produce the first PCI-Express 3.0 SSDs for the new wave of Ultrabooks.
 
Amazon.com Joins 3D Printer Craze, Enabling Wide Availability
Commercially available 3D printers have recently moved from being expensive hobbyist devices to being pricey but accessible consumer and manufacturing machines. And now, Amazon.com will sell 3D printers & supplies online.
 
New Facebook Data Center Uses All Home-Grown Servers
Facebook has opened its new data center in Lulea, Sweden. The data center is a first in two ways: the first in Europe and the first to be equipped with all Facebook-designed, Open Compute servers.
 

Mobile Enterprise Spotlight
Why Google's Project Loon is Smart Business
Google is once again proving that it's much more than a search engine or even a mobile-device company, with Project Loon. The initiative aims to bring "balloon-powered Internet" to isolated areas of the world.
 
Authorities Want Smartphone 'Kill Switch' To Fight Thefts
Law enforcement authorities are calling on the smartphone industry to adopt "kill switch" technologies that would deter theft by squeezing the market for selling stolen devices, which would be worthless if "bricked."
 
Small Business Gets Boost from Mobile Marketing
Aside from the requisite e-commerce tricks, small businesses are turning their attention to the mobile arena to engage social media-savvy customers, as mobile marketing tools offer more channels.
 

Enterprise Technology Spotlight
New Facebook Data Center Uses All Home-Grown Servers
Facebook has opened its new data center in Lulea, Sweden. The data center is a first in two ways: the first in Europe and the first to be equipped with all Facebook-designed, Open Compute servers.
 
Cisco Telecom Router Ready for Internet Traffic Flood
The Carrier Routing System-X unveiled by Cisco for the telecommunications industry is a 400 Gbps per slot system that can be expanded to nearly 1 petabit per second, enough to deal with the coming flood in demand.
 
HP's IT in a Box Targets SMBs by Using Google Apps
Hewlett-Packard is partnering with Google on HP SMB IT in a Box, which it bills as a "one-stop shop" solution for small and medium business customers. The move is likely to ruffle Microsoft's feathers.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud & Virtualization | Applications | Unified Communications | Mobile Tech | Hardware | Business Intelligence
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters | XML/RSS Feed

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2013 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.