Microsoft Issues Three Critical Patches

Strider

Microsoft on Tuesday issued a patch for an earlier discovered flaw in Visual Studio 2005, while yet another cumulative patch for Internet Explorer was released, as well as one for a vulnerability within the Windows Media Format.

The Visual Studio flaw covers an issue that was first disclosed by researchers in early November. A remote code execution issue exists within a feature called the WMI Object Broker that is used by the WMI Wizard within Visual Studio. The vulnerability is exploited by viewing a specially crafted webpage, and could result in complete system takeover, Microsoft says.

Of the rest of the vulnerabilities, all were rated "important" by Microsoft. Three deal with remote code execution issues: one in the Simple Network Management Protocol (SNMP), another in a cumulative patch for Outlook Express, and a flaw within the Remote Installation Service.

Finally, a patch has been issued to deal with an elevation of privilege risk within Windows. In order to exploit it, however, valid logon credentials and the ability to log on locally is required.

More Info -
http://www.betanews.com/article/Micr...hes/1165962835

__________________
Want to ask a question? Try This! A guide on how to post a question, reply to a post etc.