Microsoft released two (2) bulletins addressing three (3) vulnerabilities in Microsoft Windows and Windows Server. MS11-001 has an Important rating and MS11-002 is rathed Critical.
Following is the description from the MSRC Blog of the two bulletins. A complete description of all the bulletins is available in the TechNet Bulletin Summary linked below.
- MS11-001. This bulletin resolves one reported issue rated Important and affecting Windows Vista. This security bulletin addresses a vulnerability in Windows Backup Manager. This has an Exploitability Index rating of 1, and gets a 2 on our deployment priority list.
- MS11-002. This bulletin addresses two vulnerabilities affecting all supported versions of Windows. The first vulnerability is rated Critical for Windows XP, Vista and Windows 7 and the second rated Important for all supported versions of Windows Server. It involves the Microsoft Data Access Components (MDAC). This has an Exploitability Index rating of 1, and because there is a web based attack vector, this is at the top of our deployment priority list.
Microsoft also released an updated Malicious Software Removal Tool this month.
For complete details, see the references listed below.
- MSRC: January 2011 Security Bulletin Release
- TechNet: Microsoft Security Bulletin Summary for January 2011
Clubhouse Tags: Clubhouse, Microsoft, Windows, Security, Updates, Vulnerabilities, Information,