November Patch Tuesday: 11 vulnerabilities

[nsane.forums]

<p>According to the Microsoft Security Response Center, Microsoft will issue three Security Bulletins addressing 11 vulnerabilities on Tuesday, November 9. It will also <a href="https://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032454441">host a webcast</a> to address customer questions the following day.</p>

<p>The first of the vulnerabilities is rated "Critical" while the other two are marked as "Important." The first two vulnerabilities earned their rating through a remote code execution impact, meaning a hacker could potentially gain control of an infected machine. All the three of updates may require a restart. </p>

<p>Windows operating systems aren't in the bulletin this month; Microsoft Office XP, Office 2003, Office 2007, and Office 2010 are all being patched, as is Office 2011 for Mac. Separately, the Forefront security suite is also vulnerable.

</p>

<p>Compared to <a href="http://arstechnica.com/microsoft/news/2010/10/october-2010-patch-tuesday-will-come-with-most-bulletins-ever.ars">last month's record Patch Tuesday</a>, this one is puny. The exact breakdown of the bulletins is as follows:</p>

<div class="news-item-figure"><table><tbody><tr><th>#</th><th>Rating</th><th>Impact</th><th>Affected software</th></tr><tr class="odd"><td>1</td><td>Critical</td><td>Remote Code Execution</td><td>Office XP/2003/2007/2010, Office 2011 for Mac</td></tr><tr class="even"><td>2</td><td>Important</td><td>Remote Code Execution</td><td>PowerPoint 2002/2003</td></tr><tr class="odd"><td>3</td><td>Important</td><td>Elevation of Privilege</td><td>Forefront Unified Access Gateway 2010</td></tr></tbody></table></div>

<p>Along with these patches, Microsoft is also planning to release the following on Patch Tuesday:</p> <br/>

• One or more nonsecurity, high-priority updates on Windows Update (WU) and Windows Server Update Services (WSUS)
  
• One or more nonsecurity, high-priority updates on Microsoft Update (MU) and WSUS
  
• An updated version of the Microsoft Windows Malicious Software Removal Tool on WU, MU, WSUS, and the Microsoft Download Center

<p>This information is subject to change by Patch Tuesday; Microsoft has been known to rush patches or to pull them as it deems necessary. </p>

View: Original Article