Patch Tuesday: Microsoft pushes nine fixes for 16 flaws
Microsoft on Tuesday issued nine security bulletins to address three "critical" and six "important" security issues.
The patches righted 16 flaws in Windows, Internet Explorer, Office, SharePoint, and Visual Basic for Applications.
Yunsun Wee of Microsoft Trustworthy Computing recommended organizations prioritize patching the three critical updates first, which includes a fix for the zero-day vulnerability in Microsoft Core XML Services (MSXML) that was disclosed in early June. Attackers have been targeting the vulnerability already, and exploit code has been added to the BlackHole malware toolkit and to the Metasploit penetration testing framework. "[Bulletin] MS12-046 has the fix that IT folks have been waiting a month for," Marc Maiffret, CTO of identity management company BeyondTrust, told SCMagazine.com.
