Cyber Risks · Cisco Talos

Microsoft Tuesday Coverage for August 2009

Summary: Cisco Talos noted nine Microsoft advisories in the August 2009 Microsoft Tuesday release, eight of which are suitable for IPS/IDS detection. The advisories cover flaws in IIS, the Active Template Library, the Windows AVIFile API, WINS, the Windows Workstation Service, Windows Telnet (improper processing of NTLM credentials), Office Web Components, and Remote Desktop Connection, most of which may allow a remote attacker to execute code.

Key Takeaway: Eight of the nine advisories shipped with detection rules, meaning the remaining gap is on the defender's side: whether those signatures are deployed and tuned before a remote attacker turns a programming error into code execution.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Related