Barney's Blog

Blog archive

Four Patches Proffered

As expected, Microsoft sent out four patches yesterday, all to fix eight holes that could allow for remote execution attacks. While there are only four patches, all are deemed critical.

A hole in Windows Media Player that could let someone use a media file to take over your machine got plugged. The Windows graphics engine, GDI+, also got a hole filled that affects everything from SQL Server to Office. This hole is one analysts expect to be heavily attacked, so patching is of the essence.

The last two remedies are aimed at Windows Media Encoder 9 and a remote execution flaw in Office.

Posted by Doug Barney on September 10, 2008