January Microsoft Patch Tueday
Microsoft has announced one new patch today regarding a flaw that could allow remote code execution. The patch is rated Critical for Windows 2000 servers and Low for devices using other Windows Operating Systems. Gladiator recommends that users immediately apply this update. Detailed information for the patch can be found in Microsoft’s January Security Bulletin. Summary information is included below:
- Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution (972270) MS10-001 – This update fixes remote code execution vulnerabilities in Microsoft Windows Operating Systems. This vulnerability is rated Critical on Windows 2000 and Low on other versions of Windows.
Gladiator recommends that users patch their Windows 2000 systems quickly for MS10-001. Exploit code for that system has either been released or is likely to be released in the near future.
Related Links:
- Microsoft Security Bulletin (http://www.microsoft.com/technet/security/Bulletin/MS10-001.mspx)