Microsoft Patch Tuesday fixes 22 vulnerabilities
As part of its monthly Patch Tuesday upgrades, Microsoft on Tuesday released fixes for 22 vulnerabilities discovered in Internet Explorer, Windows, Visio and Visual Studio.
As previously mentioned, Microsoft released 13 security bulletins, two of which are rated critical in severity, nine important and two moderate. The Redmond, Wash.-based company advised customers to install all of the updates as soon as possible, starting with the two rated most critical.
- MS11-057 for Internet Explorer fixes five privately reported vulnerabilities and two publicly disclosed vulnerabilities, according to the release. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.
- MS11-058 resolves two privately reported vulnerabilities in Windows DNS server. The more severe of these vulnerabilities could allow remote code execution if an attacker sends a specially crafted Naming Authority Pointer (NAPTR) query to a DNS server. Servers that do not have the DNS role enabled are not at risk, the report said.
