Cyber Risks · Cisco Talos

Rule Release for Today, Tuesday September 14th, 2010

Summary: Cisco Talos released detection rules covering seven Microsoft advisories (MS10-061 through MS10-068) and one Adobe bulletin (APSA10-03), each describing a programming error that may allow a remote attacker to execute code. The affected products include the Windows Print Spooler, Windows Media Player, Uniscribe fonts on Windows XP and Vista, Outlook, IIS, WordPad, LSASS, and Adobe Flash Player, with rules identified by GID 3 SIDs 17242 through 17256 and GID 1 SID 17257.

What you should know: Eight separate remote code execution flaws across Outlook, IIS, LSASS, the Print Spooler and Flash Player shipped in a single rule release, meaning defenders had one window to get detection in place before exploitation of any one of them.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Related