Home » News

News

Microsoft Patches More Than 20 Bugs in May Patch Tuesday

Microsoft fixed 23 security flaws across all versions of Windows, Microsoft Office, .NET Framework, and Silverlight, as part of May's Patch Tuesday release. Four of the security bulletins are rated as Important, and the other three are Critical, but two in particular are getting the most attention: MS12-034 and MS12-029.

MS12-034, ties together 10 fixes across several product lines that were bundled together as part of an update meant to implement the final fixes on a vulnerability exploited by the notorious Duqu malware.

"Duqu is no longer able to exploit that vulnerability after applying the security update. However, we wanted to be sure to address the vulnerable code wherever it appeared across the Microsoft code base," blogged Jonathan Ness from Microsoft's security research center engineering team.

MS12-029 addresses a critical bug in Microsoft Office that could lead to remote-code execution if the victim opens or previews a malicious Rich Text Format (RTF) file using a vulnerable version of Microsoft Office.

"In an email attack scenario, an attacker could exploit the vulnerability by sending specially crafted RTF- formatted data in the contents of an email message," Microsoft noted in its advisory. "The vulnerability could be exploited when the specially crafted RTF email message is previewed or opened in Outlook while using Microsoft Word as the email viewer. An attacker could also exploit the vulnerability by sending a specially crafted RTF file as an attachment and convincing the user to open the specially crafted RTF file."

Read more -here-

  User Reviews/Comments:

    rate:

 -- rating -- 5 - Excellent 4 - Good 3 - Average 2 - Poor 1 - Very Poor

   avg:

by Peter the IT Guy - 2012.05.10 13:59

Anyone looked into patch management software? I was doing some research on solutions and found this blog post about VMWare Go Pro. Thoughts?