Security threats Toolkit

Story: Microsoft patches four critical IE, Exchange holes

• 
• 

Internet Explorer Patch

Of the critical updates, MS09-002 (Cumulative Security Update for Internet Explorer) is the most important to address for the following reasons:

· The remote-code-execution vulnerabilities exist in IE 7 on both Windows XP and Windows Vista – probably the most prevalent Windows configurations in use today.

· This update addresses two separate vulnerabilities that are rated a “1” on Microsoft’s exploitability index and are noted as “Consistent exploit code can be crafted easily.” Although there is no known exploit code available today, we expect it to be available soon.

· Browser vulnerabilities are especially popular with the hacker community to deliver blended attacks where a compromised browser is used to introduce additional malware onto the computer.

• 
• 

• 
• 
• 

Full Talkback thread