This month Microsoft decided to play catch-up and hit us with a hefty 12 security bulletins covering 20 vulnerabilities, 13 of which were critical. The volume was not surprising given that Microsoft
pulled four of eight planned bulletins four days before the January release. We had also been anxiously awaiting patches for a
growing number of Microsoft Word vulnerabilities which had been outstanding for up to two months, with public exploit code being available along with admissions from Microsoft of active exploitation. Fortunately, all now appear to have patches available. Once again, client side vulnerabilities were king, with most of the critical vulnerabilities falling into this category.
The February patch release was significant leaving us with 20 vulnerabilities in 12 bulletins having the following overall severity rankings.
This month's bulletins included patches for 7 public vulnerabilities, most of which were already being actively exploited. The following publicly known issues received patches:
Below is a cheat sheet for all 20 vulnerabilities.
Enjoy!
- michael
Posted
02-14-2007 12:32 AM
by
erik.peterson