Vulnerabilities / Threats
8/10/2010
02:28 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Microsoft Issues Biggest Security Patch Yet

IT administrators have plenty of work to do if they want to close up the holes in their systems.

Microsoft on Tuesday released a record-setting security patch consisting of 14 bulletins that address 34 vulnerabilities.

Eight of the bulletins are rated "critical" and six are rated "important."

Affected software includes: Microsoft Office, Microsoft Windows, Microsoft Internet Explorer, Microsoft Silverlight, Microsoft XML Core Services and Server Message Block.

In addition, Microsoft is releasing a new security advisory for a privilege escalation vulnerability that affects its Windows Service Isolation feature.

The massive patch is the largest since October, 2009, when Microsoft issued 13 security bulletins covering 34 vulnerabilities.

MS10-046 would bring the total to 15 bulletins but for the fact that it was issued out-of-band last week to provide a fix for a 0-day flaw in LNK files. The vulnerability is currently being exploited by the Stuxnet family of malware.

Wolfgang Kandek, CTO of Qualys, advises IT administrators to patch the vulnerabilities that affect end users and Internet browsing first.

These include: MS10-053, six fixes for Internet Explorer; MS10-055, a Cinepak code vulnerability; MS10-052, a vulnerability in Microsoft's MPEG Layer-3 audio codecs; MS10-060, a vulnerability affecting Silverlight and .Net; MS10-051, a vulnerability in the Internet Explorer MSXML ActiveX component; and MS10-049, a client side HTTPS vulnerability.

The first five of these are all have an Explotability Rating of "1"; the sixth, MS10-049, has an Explotability Rating of "2".

MS10-054 addresses a vulnerability in the SMB protocol.

Joshua Talbot, security intelligence manager for Symantec Security Response, argues that this should be of particular concern to enterprises.

"Not only does it give an attacker system-level access to a compromised SMB server, but the vulnerability occurs before authentication is required from computers contacting the server," he said in an e-mail. "This means any system allowing remote access and not protected by a firewall is at risk."

Josh Abraham, security researcher for Rapid7, concurs, noting in an e-mail that the SMB vulnerability "is potentially the most dangerous vulnerability as it allows unauthenticated attackers to execute arbitrary code on remote machines."

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Must Reads - September 25, 2014
Dark Reading's new Must Reads is a compendium of our best recent coverage of identity and access management. Learn about access control in the age of HTML5, how to improve authentication, why Active Directory is dead, and more.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2003-1598
Published: 2014-10-01
SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.

CVE-2011-4624
Published: 2014-10-01
Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

CVE-2012-0811
Published: 2014-10-01
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used in backup files gene...

CVE-2014-2640
Published: 2014-10-01
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2014-2641
Published: 2014-10-01
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Chris Hadnagy, who hosts the annual Social Engineering Capture the Flag Contest at DEF CON, will discuss the latest trends attackers are using.