Wednesday, December 15, 2010

Updates Released by Microsoft to Fix Several Highly-Critical Vulnerabilities

Microsoft has released numerous patches to correct serious vulnerabilities found in Internet Explorer and Microsoft Office running on all current versions of Windows. An attacker typically exploits the vulnerabilities in Internet Explorer by enticing users to visit a malicious webpage (possibly including legitimate webpages); attackers use the vulnerabilities in Microsoft Office to entice users to open maliciously-crafted Office documents. Once the webpage or Office document is opened, the attacker uses it to execute code on a user’s computer, possibly enabling them to gain full control over the user’s machine.

3D Corporation will automatically test and deploy the aforementioned patches on the networks of our 3DProActive™ Managed and Partner clients; other Internet Explorer and Office users should download and install the appropriate patches immediately to avoid possible exploitation of their machines. As attackers are hijacking more and more legitimate webpages everyday, it’s becoming ever more crucial that businesses keep their patches up-to-date.

More information regarding these vulnerabilities and their impact can be found in the following security bulletins issued by Microsoft: Microsoft Security Bulletin MS10-090 - Critical; Microsoft Security Bulletin MS10-103 - Important; Microsoft Security Bulletin MS10-105 - Important.

3D’s security solutions can protect businesses from threats like these automatically. If you would like additional information on how we can make and keep your network worry-free, please visit our website at http://www.3dcorp.us/, email us at info@3dcorp.us, or call our office at (360) 671-4906.

References: WatchGuard’s LiveSecurity Service Updates “IE Suffers from Five New ‘Drive by Download’ Vulnerabilities” and “Office Update Fixes Flaws with Image-Embedded Documents”; Microsoft Security Bulletin MS10-090 - Critical; Microsoft Security Bulletin MS10-103 - Important; Microsoft Security Bulletin MS10-105 - Important

0 comments:

Post a Comment