Two patches from Microsoft on Tuesday

gallery

In its Security Bulletin, Microsoft has predicted two vulnerabilities to be patched next Tuesday.

The first vulnerability is listed as critical, and concerns remote code execution in Windows XP and Server 2003. The second is listed as important, and concerns spoofing in Windows Server 2003.

In a statement, Alan Bentley, the vice president of Lumension Security, said: "It seems that November will be a relatively light month in terms of security warnings, but users should not be complacent."

Regarding the first bulletin for Windows, Bentley said such a critical rating is worrying. "Microsoft has given a 'critical' rating, the highest of its severity warnings, as typically attackers can take over control of an entire system without any user interaction," he said.

The second vulnerability regards spoofing, Bentley said. "This enables attackers to mask the identities of phishing web sites in Internet Explorer's task bar. Users are then lured to these sites under false pretences."

Email to a friend

Print this page