Microsoft Tuesday Coverage for February MS09-002, MS09-003, MS09-004, MS09-005
Summary: Cisco Talos covered four Microsoft advisories this month, three of them new, with one having been released in December. The advisories address remote code execution flaws in Internet Explorer (MS09-002), Exchange (MS09-003), SQL Server (MS09-004, exploitable via the sp_replwritetovarbin stored procedure), and Visio (MS09-005, via malformed Visio files), with detection rules identified by GID and SID for each.
Key Takeaway: Four separate Microsoft products carried remote code execution flaws in a single month, and the SQL Server issue was reachable through a stored procedure rather than a patch-day headline - the kind of exposure that sits quietly on internal systems.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026