Cyber Risks · Cisco Talos

Rule release for today, Tuesday April 13th, 2010

Summary: Cisco Talos released rules on Tuesday, April 13th, 2010, covering Microsoft's Tuesday and Adobe's quarterly patch releases. The Microsoft advisories span MS10-019 through MS10-029, addressing issues including a CAB Subject Interface Package authentication bypass, SMB and Publisher remote code execution flaws, an SMTP denial of service, Windows Media Service and Media Player code execution flaws, a Media Player ActiveX control flaw, Visio code execution errors, and an IPv6 spoofing error.

Why it matters: Eleven Microsoft advisories in a single patch cycle, several of them remote code execution in services like SMB and Windows Media, meant any host left unpatched past that Tuesday carried multiple paths for a remote attacker to run code.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Related