Microsoft patches 15 flaws, blacklists additional DigiNotar certificates
Microsoft issued five security bulletins for its September 2011 Patch Tuesday, addressing 15 vulnerabilities in Windows and Office.
In addition, the software giant issued an updated security advisory Tuesday, adding six more DigiNotar root certificates to its Windows Untrusted Certificate Store. DigiNotar, a certificate authority based in the Netherlands, has been reeling since it announced its CA systems were breached by an attacker.
Patching experts marked September as a lighter month for system administrators, because none of the security bulletins were rated “critical” but all five were “important.” The updates repair flaws in Microsoft Office 2010, Microsoft Excel, Microsoft Office Groove 2007 and SharePoint Workspace 2010. Despite the slow month, system administrators should give MS11-072 a higher priority, said Amol Sarwate, vulnerability labs manager at Redwood Shores, Calif.-based vulnerability management vendor Qualys Inc. The bulletin addresses five vulnerabilities in Microsoft Excel that could enable remote code execution.
