Both Microsoft and Adobe have released a number of critical updates this week. These updates are to patch known holes that are currently being exploited in the wild. These patches apply to almost the entire range of Micrsoft products:
Wolfgang Kandek, chief technology officer for vulnerability management firm Qualys, is particularly worried about MS12-027, because the weakness spans an unusually wide range of Microsoft products. Microsoft agrees, calling this patch the highest priority security update this month.
“What makes this bulletin stand out is that Microsoft is aware of attacks in the wild against it and it affects an unusually wide-range of Microsoft products, including Office 2003 through 2010 on Windows, SQL Server 2000 through 2008 R2, BizTalk Server 2002, Commerce Server 2002 through 2009 R2, Visual FoxPro 8 and Visual Basic 6 Runtime,” Kandek said. “Attackers have been embedding the exploit for the underlying vulnerability (CVE-2012-0158) into an RTF document and enticing the target into opening the file, most commonly by attaching it to an e-mail. Another possible vector is through web browsing, but the component can potentially be attacked through any of the mentioned applications.”
As always users should install these updates immediately and if they have any issue installing updates they are encouraged to schedule an appointment.
kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746