On Tuesday, June 14, 2011, Microsoft is planning to release sixteen (16) bulletins addressing 34 vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, .NET, SQL, Visual Studios, Silverlight and ISA. Nine of the bulletins are identified as Critical in severity and seven as Important.
Although it is advised to restart your computer after installing updates, whether required or not, a number of the scheduled bulletins will require a restart in order to install the updates. I recommend installing the update to .NET Framework separately as well as other updates requiring a restart.
The Internet Explorer bulletin will address one of the known vectors to the cookie folder related to "“cookiejacking.” Cookiejacking allows an attacker to steal cookies from a user’s computer and access websites the user has logged into. Note, however, that the Microsoft Malware Protection Center (MMPC) has not detected attempts to use this technique.
References
- MSRC Blog: June Advance Notification Service and 10 Immutable Laws Revisited
- TechNet: Advance Notification Service for the June 2011 Security Bulletin Released
No comments:
Post a Comment