Microsoft patches for eight flaws; FTP server fix not ready
Microsoft on Tuesday delivered five patches to address eight Windows vulnerabilities as part of the software giant's monthly security update.
The release resolves a mismash of client- and server-side issues, but the five bulletins all have one thing in common: They are rated "critical," meaning the vulnerabilities could result in remote code execution.
Most experts agreed that bulletin MS09-048 could turn out to be the most severe, as it resolves three flaws in TCP/IP, a core networking component used to communicate over the internet. Attackers could successfully exploit the vulnerabilities by sending a flood of specially crafted TCP/IP packets from one PC to another to execute remote code or launch denial-of-service attacks.
