Members
  • Total Members: 14176
  • Latest: toxxxa
Stats
  • Total Posts: 42869
  • Total Topics: 16078
  • Online Today: 3830
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)









Author Topic: Few info's about following Patch Tuesday - December 2012.  (Read 2192 times)

0 Members and 1 Guest are viewing this topic.

Samker

  • SCF Administrator
  • *****
  • Posts: 7528
  • KARMA: 322
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Few info's about following Patch Tuesday - December 2012.
« on: 08. December 2012., 08:41:18 »


Microsoft is planning to release seven bulletins next Tuesday, five of which tackle critical vulnerabilities, as part of its final Patch Tuesday update of 2012.

All currently supported operating systems (including Windows 8 and Windows RT) will need patching. The updates feature critical updates for Redmond's IE 9 and IE 10 browser software, a critical update for Microsoft Word, and critical updates for some of Microsoft's server products (Exchange and Sharepoint).

Wolfgang Kandek, CTO of Qualys, singled out the Word update for particular attention.

"Bulletin 3 is special, as it affects Microsoft Word and is rated critical, which happens very rarely," he said: http://laws.qualys.com/2012/12/december-2012-patch-tuesday-pr.html

"Usually Microsoft downgrades even Remote Code Execution Office vulnerabilities to 'Important', because a user interaction (e.g., opening a malicious file) is required. In this case we assume the 'critical' rating comes from Outlook, which can be configured to use Word to visualise documents in its preview pane. This is an automatic mechanism that does not require user interaction. In any case, this is will be an important bulletin to watch out for."

Microsoft pre-release bulletin can be found here: http://technet.microsoft.com/en-us/security/bulletin/ms12-dec

Paul Henry, a security analyst patch management firm Lumension, noted that Microsoft has managed to reduce the number of updates it issued this year compared to 2011.

"In 2011, Microsoft had 100 bulletins for the calendar year, of which 34 were critical, 63 important and 3 moderate," Henry said. "In 2012, they reduced the number of bulletins by close to 20 percent, coming in at 83 bulletins for the year, of which 35 were critical, 46 important and 2 moderate. It’s great to see that Microsoft’s Secure Coding Initiative is paying off, reducing the number of vulnerabilities in their software."

(ElReg)

Samker's Computer Forum - SCforum.info

Few info's about following Patch Tuesday - December 2012.
« on: 08. December 2012., 08:41:18 »

Pez

  • SCF VIP Member
  • *****
  • Posts: 776
  • KARMA: 117
  • Gender: Male
  • Pez
Microsoft Security Bulletin Advance Notification for December 2012
« Reply #1 on: 10. December 2012., 11:42:55 »

Microsoft Security Bulletin Advance Notification for December 2012

http://technet.microsoft.com/en-us/security/bulletin/ms12-dec


TechNet Webcast: Information About the December 2012 Security Bulletin Release

https://msevents.microsoft.com/CUI/EventDetail.aspx?culture=en-US&EventID=1032522564

Event ID: 1032522564

Language(s):  English.

Product(s):  computer security and information security.

Audience(s): IT Decision Maker, IT Implem_IT Generalist and IT Manager.

Join us for a brief overview of the technical details of this month's Microsoft security bulletins. We intend to address your concerns in this webcast. Therefore, Microsoft security experts devote most of this webcast to answering the questions that you ask.
 
Presented by:
Dustin Childs, Group Manager, Trustworthy Computing, Microsoft Corporation
and Jonathan Ness, Principal Security Development Lead, Microsoft Corporation

Register for Event

Starts: Wednesday, December 12, 2012 11:00 AM
Time zone: (GMT-08:00) Pacific Time (US & Canada)
Duration: 1 hour(s)
https://msevents.microsoft.com/CUI/EventDetail.aspx?culture=en-US&EventID=1032522564
Their is two easy way to configure a system!
Every thing open and every thing closed.
Every thing else is more or less complex.

Start Turfing ! http://scforum.info/index.php/topic,8405.msg21475.html#msg21475

Samker's Computer Forum - SCforum.info

Microsoft Security Bulletin Advance Notification for December 2012
« Reply #1 on: 10. December 2012., 11:42:55 »

 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising