Gladiator Research and Security

Microsoft has released four patches resolving two Critical and two Important vulnerabilities in various Microsoft products.

The Critical vulnerabilities affect the following products:

• Internet Explorer
• Microsoft Exchange

The Important vulnerabilities affect the following products:

• Microsoft SQL Server
• Microsoft Office Visio

The vulnerability for SQL Server has publicly available exploit code and therefore should be patched as soon as possible.

Microsoft has rated several of these vulnerabilities with an exploitability index of 1, meaning there is a high probability of publicly available exploits being developed.  Gladiator recommends that institutions follow their standard patching cycles to roll out these updates.  As always, it is highly recommended that you test any new software prior to introducing it to a production environment.  Please refer to the Microsoft bulletin below for further details.

Related Links:

• Microsoft Security Bulletin for February 2009 http://www.microsoft.com/technet/security/bulletin/ms09-feb.mspx
• ISC SANS Diary Entry http://isc.sans.org/diary.html?storyid=5836