Fergie's Tech Blog

Patch Tuesday: Microsoft's Monthly Patch Release Plugs 11 Security Holes - UPDATE

Brian Krebs writes on Security Fix:

Microsoft Corp. today released software updates to fix at least 11 security holes in various versions of its Windows operating system and other products. Windows users can download the free updates manually from Microsoft Update or via Automatic Updates.

This month's patch batch includes an unscheduled update to remedy two vulnerabilities in Windows Media Player that criminals could use to install software on Windows PCs just by convincing users to open a specially crafted Windows Media Player file. Microsoft added this update at the last minute, not long after "proof-of-concept" code demonstrating how to exploit the flaw was posted online.

Another update fixes four separate security holes in Internet Explorer that an attacker could use to break into or steal data from affected PCs just by coaxing the user into visiting a Web site or opening an e-mail designed to take advantage of the flaw.

More here.

UPDATE 12/12 12:49: The SANS ISC folks have a great wrap-up here.

posted by Fergie @ 12/12/2006 11:51:00 AM