Wednesday, April 13, 2011

Microsoft fixes serious Internet Explorer, SMB flaws in record Patch Tuesday


Microsoft unleashed a massive update across its product line for Patch Tuesday this month, leading to what security experts say will be a long patching cycle for security professionals everywhere.

The company fixed a record-breaking 64 vulnerabilities with a 17 security bulletins. The last time Microsoft produced such an extensive list was back in December, which also had 17 bulletins, but contained patches for fewer vulnerabilities.

New Attack using Adobe Flash

Adobe Systems Inc. has issued a security advisory notifying users of a serious Flash Player zero-day exploit that could be used by attackers to gain complete control of a system. The software maker warns that ongoing attacks are spreading using a malicious Microsoft Word document.

The flaw affects Adobe Flash Player for Windows, Macintosh, Linux and Solaris as well as Flash Player for Android and Chrome users. In the security advisory issued Monday, Adobe said the vulnerability could cause a crash, setting up a condition that could potentially allow an attacker to execute malicious code on an affected system