Microsoft came out with a moderate collection of vulnerabilities for the month of November. The six security bulletins included a total of nine vulnerabilities with the following breakdown for maximum severity:
- 7 Critical
- 1 Important
- 1 Moderate
This month's bulletins included patches for three public vulnerabilities for which public exploit code is already available. More importantly, Microsoft admits to being aware of exploitation using all three of these vulnerabilities. The following known issues received patches:
See the summary below for links to the public exploit code for these issues.
This month's bulletins did not address at least one known vulnerability for which exploitation has occurred. On October 31, 2006, Microsoft acknowledged a vulnerability in the WMI Object Broker ActiveX control packaged with Visual Studio 2005, which can lead to remote code execution. No word yet on when a patch will be available for this issue.
Below is a cheat sheet for all 9 vulnerabilities.
Enjoy!
- michael
Posted
11-14-2006 2:26 PM
by
erik.peterson