This month Microsoft have released six (6) security bulletins of which one (1) has a maximum rating of Critical, four (4) which have a maximum rating of Important, and one (1) having a maximum rating of Moderate.
Hello. Today we’re releasing six security bulletins – one Critical-class, four Important and one Moderate – addressing seven issues in Microsoft Windows, Visual Studio, and Expression Design. We recommend that customers focus on MS12-020, our sole critical-class bulletin, as the March deployment priority. [1]
| Bulletin | KB number | Description | Severity | Impact | Software |
|---|---|---|---|---|---|
| MS12-017 | 2647170 | Vulnerability in DNS Server Could Allow Denial of Service | Denial of Service | Important | Microsoft Windows |
| MS12-018 | 2641653 | Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege | Elevation of Privilege | Important | Microsoft Windows |
| MS12-019 | 2665364 | Vulnerability in DirectWrite Could Allow Denial of Service | Denial of Service | Moderate | Microsoft Windows |
| MS12-020 | 2671387 | Vulnerabilities in Remote Desktop Could Allow Remote Code Execution | Remote Code Execution | Critical | Microsoft Windows |
| MS12-021 | 2651019 | Vulnerability in Visual Studio Could Allow Elevation of Privilege | Elevation of Privilege | Important | Microsoft Visual Studio |
| MS12-022 | 2651018 | Vulnerability in Expression Design Could Allow Remote Code Execution | Remote Code Execution | Important | Microsoft Expression Design |
PATCH NOW:
MS12-020 ~ These factors make it very attractive for attackers to attempt reverse-engineering Microsoft’s MS12-020 patch to, understand the details of the bug and craft an exploit. This will likely happen sooner than 30 days. The universal applicability of the exploit and its targetability over the Internet and internal networks might motivate the creation auto-propagating worms to capture systems quickly and efficiently. [5]
[1.] Strength, flexibility and the March 2012 security bulletins (2012-Mar-13) [MS: MSRC]
[2.] March 2012 Microsoft Black Tuesday (2012-Mar-13) [SANS]
[3.] Microsoft Security Bulletin Summary for March 2012 (2012-Mar-13) [MS]
[4.] Microsoft security updates for March 2012 (2012-Mar-13) [MS]
[5.] Why We Rated the MS12-020 Issue with RDP “Patch Now” (2012-Mar-13) [SANS]
0 Responses to “Patch <strike>Tuesday</strike> Wednesday (Mar-2012)”