Boundary IT Services Ltd » Security http://www.boundaryitservices.co.uk Providing IT and Telecommunications Solutions Wed, 09 Jun 2010 12:01:55 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Microsoft Security Patches for June 2010 http://www.boundaryitservices.co.uk/security/microsoft-security-patches-for-june-2010.htm http://www.boundaryitservices.co.uk/security/microsoft-security-patches-for-june-2010.htm#comments Wed, 09 Jun 2010 12:01:55 +0000 Boundary http://www.boundaryitservices.co.uk/?p=792 The Microsoft Patch Tuesday train rolled into town today, dropping off a massive 10 security bulletins with fixes for at least 34 documented vulnerabilities.

Three of the bulletins are rated “critical” because of the risk of remote code execution attacks. Affected products include the Windows operating system, Microsoft Office, the Internet Explorer browser and Internet Information Services (IIS).

This month’s patch batch also provides cover for a known cross-site scripting flaw in the Microsoft SharePoint Server and a publicly discussed data leakage hole in Internet Explorer.

Microsoft is urging its users to pay special attention to MS10-033 (Windows), MS10-034 (ActiveX killbits) and MS10-035 (Internet Explorer) because these contain fixes for issues that may be exploited by malicious hackers very soon.

]]> http://www.boundaryitservices.co.uk/security/microsoft-security-patches-for-june-2010.htm/feed 0 Microsoft Patches for March 2010 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-march-2010.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-march-2010.htm#comments Tue, 09 Mar 2010 11:26:39 +0000 Boundary http://www.boundaryitservices.co.uk/?p=718 Microsoft is planning a quiet Patch Tuesday this month: Just two bulletins with patches for eight security vulnerabilities.

According to Redmond’s Advance Notification, the vulnerabilities affect the Windows operating system and the Microsoft Office productivity suite.

Both bulletins are rated “important” because of the risk compromising the confidentiality, integrity or availability of user data.

Microsoft is recommending that Windows and Office users review its Advance Notification webpage and prepare to deploy the bulletins as soon as possible.

Customers should note that both bulletins will address issues that would require a user to open a specially crafted file. There are no network based attack vectors.

The patches will be released on March 9, 2009 around 11AM EST.

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-march-2010.htm/feed 0 Microsoft Patches for February 2010 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-february-2010.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-february-2010.htm#comments Tue, 09 Feb 2010 21:09:39 +0000 Boundary http://www.boundaryitservices.co.uk/?p=714 Microsoft today released 13 security bulletins with fixes for 26 vulnerabilities affecting Windows and Office users and warned customers to pay special attention to a slew of flaws that can be trivially exploited by malware miscreants.

The company urged customers to prioritize and deploy four updates because of the “critical” severity rating and the fact that “consistent exploit code” is likely within the next 30 days.

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-february-2010.htm/feed 0 Microsoft to release emergency IE patch – Jan 2010 http://www.boundaryitservices.co.uk/security/microsoft-to-release-emergency-ie-patch-jan-2010.htm http://www.boundaryitservices.co.uk/security/microsoft-to-release-emergency-ie-patch-jan-2010.htm#comments Tue, 19 Jan 2010 14:42:47 +0000 Boundary http://www.boundaryitservices.co.uk/?p=712 Microsoft has started dropping broad hints that an emergency patch for Internet Explorer will be released very soon to counter targeted attacks and the publication of exploit code for a “browse and you’re owned” vulnerability in its flagship Web browser.

The out-of-band update will be released once the company is satisfied that it has been properly tested against all affected versions of Windows. This could happen as early as this weekend.

]]> http://www.boundaryitservices.co.uk/security/microsoft-to-release-emergency-ie-patch-jan-2010.htm/feed 0 Microsoft Patches for January 2010 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-january-2010.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-january-2010.htm#comments Wed, 13 Jan 2010 16:47:04 +0000 Boundary http://www.boundaryitservices.co.uk/?p=710 The first Microsoft patch for 2010 is out, providing cover for a solitary vulnerability in the way Windows handles EOT (Embedded OpenType) fonts.

The update is rated “critical” but Microsoft says there is a low likelihood of exploitation on its newer operating systems.

The vulnerability, which was discovered by Google security engineer Tavis Ormandy, is a remote code execution issue in the way that the Microsoft Windows Embedded OpenType (EOT) Font Engine decompresses specially crafted EOT fonts.

Because Microsoft considers this a very difficult vulnerability to exploit on most operating systems, it is rated “critical” only for Windows 2000.

However, it’s important to note that Windows XP, Windows Vista and Windows 7 are all affected by this flaw.

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-january-2010.htm/feed 0 Microsoft Patches for December 2009 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-december-2009-%e2%80%93-4-critical.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-december-2009-%e2%80%93-4-critical.htm#comments Wed, 09 Dec 2009 09:20:44 +0000 Boundary http://www.boundaryitservices.co.uk/?p=703 Microsoft today shipped six bulletins with patches for a total of 12 documented security vulnerabilities in a wide range of widely deployed software products. Three of the six bulletins are rated

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-december-2009-%e2%80%93-4-critical.htm/feed 0 Microsoft Patches for November 2009 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-november-2009-%e2%80%93-3-critical.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-november-2009-%e2%80%93-3-critical.htm#comments Thu, 12 Nov 2009 09:19:11 +0000 Boundary http://www.boundaryitservices.co.uk/?p=701 As part of its scheduled batch of patches for November, Microsoft today issued six security bulletins with fixes for a total of 15 vulnerabilities affecting its Windows and Office product lines.

Three of the six bulletins are rated

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-november-2009-%e2%80%93-3-critical.htm/feed 0 Microsoft Patches for October 2009 – 13 critical http://www.boundaryitservices.co.uk/security/microsoft-patches-for-october-2009-13-critical.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-october-2009-13-critical.htm#comments Tue, 13 Oct 2009 14:05:16 +0000 Boundary http://www.boundaryitservices.co.uk/?p=682 Microsoft is planning a bumper Patch Tuesday next week

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-october-2009-13-critical.htm/feed 0 Microsoft Patches for September 2009 http://www.boundaryitservices.co.uk/security/microsoft-patches-for-september-2009-%e2%80%93-5-critical.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-september-2009-%e2%80%93-5-critical.htm#comments Mon, 07 Sep 2009 10:04:07 +0000 Boundary http://www.boundaryitservices.co.uk/?p=624 Microsoft

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-september-2009-%e2%80%93-5-critical.htm/feed 0 Microsoft Patches for June 2009 – 6 critical http://www.boundaryitservices.co.uk/security/microsoft-patches-for-june-2009-6-critical.htm http://www.boundaryitservices.co.uk/security/microsoft-patches-for-june-2009-6-critical.htm#comments Mon, 08 Jun 2009 08:59:26 +0000 Boundary http://www.boundaryitservices.co.uk/?p=618 According to the Microsoft Security Response Center, Microsoft will issue 10 Security Bulletins on Tuesday, and it will host a webcast to address customer questions on the bulletin the following day (June 10 at 11:00am PST, if you’re interested). Six of the vulnerabilities are rated “Critical,” three are marked as “Important,” and the last one is considered “Moderate.” All of the Critical vulnerabilities earned their rating through a remote code execution impact, meaning a hacker could potentially gain control of an infected machine. At least seven of the 10 patches will require a restart.

]]> http://www.boundaryitservices.co.uk/security/microsoft-patches-for-june-2009-6-critical.htm/feed 0