Patch Tuesday Fixes a Record 26 Vulnerabilities

August 14th, 2008

This month Microsoft issued 11 bulletins that address a record 26 vulnerabilities, 17 of them rated as critical. The 26 vulnerabilities are the most Microsoft has addressed since it had 25 in August 2006, which also had 17 rated as critical.The patch for the vulnerability in the Snapshot Viewer for Microsoft Access ActiveX control is important because shortly after the issue became public on July 7 there was evidence of it actively being exploited, according to Ben Greenbaum, senior research manager for Symantec security response.

“Since then, attackers have fine-tuned their exploits, resulting in even more widespread attacks,” Greenbaum said. “The Snapshot Viewer issue impacts any Internet Explorer 7 users that have the ActiveX control installed and any Internet Explorer 6 users regardless if they have the control installed or not. The nature of the control allows the attacker to install [malicious code] and exploit the vulnerability without any user interaction.”

Click here to read the rest of this story.

Entry Filed under: Hot off the Press