[ insider_reports_insider ]
Patch Tuesday Visits Office, Forefront
Bryan Young
Staff Writer
2010-11-11
 Insider Reports RSS Feed
Microsoft has gone through with its most recent round of Patch Tuesday updates, this time focusing on two software products. Microsoft Office contained seven vulnerabilities which were patched and Microsoft Forefront Unified Access Gateway (UAG) was also affected.
 | | Patch Tuesday Visits Office, Forefront |  |
Microsoft Office is the collection of several productivity software products: Word, Excel, Outlook, PowerPoint, and OneNote. The vulnerabilities recently patched spanned two security bulletins, MS10-087 and MS10-088. MS10-087 patches five bugs, all of which can allow remote code execution. They affect all versions of Office, including Office for Mac. There are three vulnerabilities having to do with the mishandling of maliciously crafted office files, meaning that a person would need to open that file on their system, but once they did they would have complete control over that system. The other two vulnerabilities deal with the loading of "Rich Text Format" files and DLL files, and are just as dangerous as the others. MS10-088 is specific to PowerPoint and only contains two bugs, although they both can allow remote code execution as well. These are both dealing with maliciously crafted PowerPoint files, one being a buffer overflow and the other an integer underflow.
Microsoft Forefront is a security software suite for Windows Networks. You read that correctly, Microsoft sent out a security patch to fix their security software (something that should probably have been secure to begin with). UAG is a service that provides security to people remotely accessing those networks. MS10-089 details several cross-site scripting (XSS) vulnerabilities plaguing this software. Basically, a hacker can gain elevated privileges on your machine if you go to a certain URL. This seems like it would fall into the 'critical' category of bugs, while Microsoft placed it in the 'important' group. It may seem that this was an underwhelming Patch Tuesday in volume of patches, but looking at the serious nature of the vulnerabilities, I would have to say I'm glad they have been fixed.
About the Author:
Bryan is a staff writer for SecurityProNews
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
