Based on foreign media reports on Tuesday, Microsoft launched 9 safety patches, including 4 protection bulletins rated in 13 holes.
It really is comprehended that Microsoft will fix a loophole within the 13, four security vulnerabilities rated One, Windows XP, Windows 2003, Vista, IIS (Internet Information and facts Solutions) plus the Workplace and other software safety vulnerability exists in the rating of critical.
Microsoft stated, four rated It can be reported that these remote code execution vulnerability exists in Phrase key document, media files, internet pages and email.
Earlier, outdoors protection authorities have pointed out, Microsoft in September launched a protection bulletin could correct Windows processing DLL (dynamic hyperlink library) file exists within the way of a protection vulnerability, Microsoft has launched resources to ease this Resolve it for your safety vulnerabilities the dangers the user's personal computer. Presently,
Windows 7 Key, the hackers have been utilizing this Windows DLL vulnerability assault around the user's pc.
but it proved that Microsoft September security patches for Windows DLL hijacking did not provide solutions to the issue might be as a result of DLL hijacking involving a big quantity of third-party apps, not a single patch to fix.
Now, permit us with each other take a look at Microsoft's September Safety Bulletin with the distinct particulars:
# 1, Security Bulletin: MS10-061 (KB2347290)
particulars: MS10-061 can fix the Windows printer services in remote code execution vulnerability, an attacker can use this vulnerability to send a specially designed print request to open the printer services interface program laptop or computer, and at this time that the malicious code about the system .
Affected Software program: Windows XP,
Office 2007 Serial, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7. One, Windows XP protection flaw inside the rating of
# 2, Security Bulletin MS10-062 (KB975558)
particulars: MS10-062 to repair codec in remote code execution vulnerability exists, the majority of the Windows running program variations are impacted by this vulnerability, it could possibly open a malicious MPEG-4 media file or to obtain contain malicious content material, streaming media, to permit an attacker to consider manage of the victim's system, thereby stealing the user's data. 1, Windows 7, Windows Server 2008 R2 and Itanium systems from this vulnerability, and Windows Vista techniques affected by this vulnerability isn't massive.
Affected Software package: Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008.
# three, Safety Bulletin MS10-063 (KB2320113)
particulars: MS10-063 can fix the Windows Unicode script processing elements (usp10.dll) in remote code execution vulnerability when a consumer uses a support OpenType fonts embedded apps (such as Mozilla Firefox or Microsoft Office) See an attacker or a specially crafted Internet page document, will permit an attacker to execute malicious code by running malicious code or steal information.
Impacted Software program: Windows XP, Windows Server 2003,
Microsoft Office 2010 Product Key, Windows Vista, Windows Server 2008.
# four, Protection Bulletin MS10-064 (KB2315011)
details: MS10-064 Outlook software package can fix remote code execution vulnerability exists when a user susceptible variations of Outlook utilize the application to connect to an Exchange server,
Windows 7 Activation, and open a specially designed malicious attacker e-mail, it is possible to make the attacker malicious code running around the user's method,
Microsoft Office 2007 Key, operate malicious packages or steal data.
Affected Software package: Workplace XP, Office 2003, Office 2007.
# 5, Protection Bulletin MS10-065 (KB2267960)
particulars: MS10-065 to fix Windows IIS (World wide web Facts Services) in remote code execution vulnerability exists, such as two privately reported vulnerabilities and one publicly vulnerability.
these vulnerabilities will set up and run IIS (World wide web Information and facts Providers) impact on the running system, an attacker can IIS (World wide web Information and facts Support) server to deliver a special HTTP request to activate these vulnerabilities, and to run around the server arbitrary code, after which manage access to providers or run a malicious plan.
Affected Application: Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7.
# 6, Security Bulletin MS10-066 (KB982802)
particulars: MS10-066 can restore the Windows remote process get in touch with components that exist in remote code execution vulnerability, an attacker can lure consumers to connect to a malicious assault to control the server, plus the sending specially designed RPC request therefore making the attacker's malicious code running around the user's program, run malicious plans or steal data.
Impacted Software: Windows XP, Windows Server 2003.
# seven, Safety Bulletin MS10-067 (KB2259922)
details: MS10-067 can repair the text within the WordPad program converter remote code execution vulnerability exists when people use WordPad to open a specially created file, an attacker, the attacker's malicious code on a user's method can run, then run malicious packages or steal data.
Impacted Computer software: Windows XP, Windows Server 2003.