[ insider_reports_insider ]
It’s Office And Web Bugs Month, Everybody
SecurityProNews
Staff Writer
2008-12-09
 Insider Reports RSS Feed
Microsoft released eight security patches today, the highest number of patches released in a single day since the company started Patch Tuesday. Presumably, changing the name to Patches Tuesday makes the event sound too cutesy.
 | | It's Office And Web Bugs Month, Everybody |  |
Six of the eight patches, listed here, are marked critical and two are marked important. In all 28 vulnerabilities were outlined in Windows, Internet Explorer, Developer Tools and Software, SharePoint Server, and three patches addressed flaws in Microsoft Office.
"It is the month of Office and Web bugs," said Dave Marcus, security research and communications director at McAfee Avert Labs. "Many of the vulnerabilities addressed by Microsoft's new fixes could allow an attacker to gain complete control over a vulnerable computer by tricking a user to visit a malicious Web site or open a rigged Office file."
McAfee singles out three vulnerabilities as the most urgent of the bunch: Office (MS08-072 and MS08-074) and Microsoft Internet Explorer (MS08-073).
Continuing its tradition of vulnerabilities in the Graphics Device Interface (GDI+) (MS08-071), it gets another patch preventing exposure to image file-based malware.
"Microsoft has repeatedly had to fix problems related to the Graphics Device Interface in Windows and vulnerabilities in the component have been exploited broadly in the past. We can expect that security researchers will be looking to reverse engineer today's patches, which may very well lead to many more exploits being created," said Marcus.
2008 has been a fruitful year for Microsoft security bulletins with the company issuing 77 of them so far, compared with just 69 in 2007, but is still one shy of the 78 issued in 2006.
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
