hey_moe
March 4th, 2010, 15:46
Microsoft will issue two bulletins fixing eight vulnerabilities rated "important" in Windows and Microsoft Office products on Tuesday, the company announced on Thursday.
This represents a light Patch Tuesday, a contrast to last month (http://news.cnet.com/8301-27080_3-10450146-245.html) when the company patched 26 holes with 13 bulletins, including critical vulnerabilities for Windows.
Meanwhile, Microsoft is continuing to monitor the situation with a VBScript vulnerability that was disclosed on Monday (http://news.cnet.com/8301-27080_3-10461853-245.html), Jerry Bryant, senior security communications manager lead at the company, wrote in a blog post (http://blogs.technet.com/msrc/archive/2010/03/04/march-2010-bulletin-release-advance-notification.aspx).
Proof-of-concept code has been published on the Internet that exploits that vulnerability, which affects older Windows systems running Internet Explorer. Microsoft suggested several workarounds until it releases a patch, including avoiding pressing the F1 key when prompted by a Web site.
This represents a light Patch Tuesday, a contrast to last month (http://news.cnet.com/8301-27080_3-10450146-245.html) when the company patched 26 holes with 13 bulletins, including critical vulnerabilities for Windows.
Meanwhile, Microsoft is continuing to monitor the situation with a VBScript vulnerability that was disclosed on Monday (http://news.cnet.com/8301-27080_3-10461853-245.html), Jerry Bryant, senior security communications manager lead at the company, wrote in a blog post (http://blogs.technet.com/msrc/archive/2010/03/04/march-2010-bulletin-release-advance-notification.aspx).
Proof-of-concept code has been published on the Internet that exploits that vulnerability, which affects older Windows systems running Internet Explorer. Microsoft suggested several workarounds until it releases a patch, including avoiding pressing the F1 key when prompted by a Web site.