Also, Microsoft took this opportunity to remind Windows XP users that the company will no longer be supporting Windows XP after April 2014 (guess I will have to retire the above broken Windows graphic as well).
They are available via Windows Update or Automatic Update. In short, don’t put off applying this month’s patches from Microsoft.
According to Trustwave, the bad guys in that attack included the Windows flaw as a means of bypassing Adobe Reader’s security sandbox, a technology designed ensure that any malicious code embedded in documents only runs under limited privileges (i.e., isn’t allowed to invoke other programs or alter core system settings). In one version of this attack, documented quite nicely in this fascinating yet somewhat technical writeup from Trustwave Spiderlabs, attackers used this Windows flaw in combination with a bug in Adobe Reader. Nevertheless, flaws marked “important” can be quite dangerous, particularly when used in tandem with other attack techniques.īy way of illustration, this month’s MS14-002 patch addresses an important zero-day flaw that was first found to be exploited in targeted attacks late last year. Oracle released an update for Java that fixes at least three dozen security holes in the widely-used program.Īll of the vulnerabilities that Microsoft fixed this month earned “important” ratings not quite as dire as those labeled “critical,” which involve flaws so dangerous that they can be exploited by bad guys or malware to break into systems with no user interaction. Adobe released patches for AIR, Acrobat, Flash and Reader, while Microsoft pushed out fixes to shore up at least a half dozen security weaknesses in Windows and Office. Adobe, Microsoft and Oracle today each issued security updates to fix serious vulnerabilities in their products.
0 kommentar(er)
