Vulnerability Team

Microsoft ha publicado 17 boletines (2 considerados como Criticos, 14 Importantes y 1 de nivel moderado) corresspondientes al Boletin de Seguidad del mes de Diciembre el cual corrige hasa un total de 40 vulnerabilidades en Microsoft Windows, Internet Explorer, Office, SharePoint y Exchange. Estas vulnerabilidades podrian permitir a un atacante ejecutar codigos maliciosos, operarar en los equipos afectados con altos privilegios o inclusive causar DoS (denial-of-service).

Los boletines son los siguientes.

CRITICOS:
MS10-090 Cumulative Security Update for Internet Explorer (2416400)

MS10-091 Vulnerabilities in the OpenType Font (OTF) Driver Could Allow Remote Code Execution (2296199)

IMPORTANTES:

MS10-092 Vulnerability in Task Scheduler Could Allow Elevation of Privilege (2305420)

MS10-093 Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (2424434)

MS10-094 Vulnerability in Windows Media Encoder Could Allow Remote Code Execution (2447961)

MS10-095 Vulnerability in Microsoft Windows Could Allow Remote Code Execution (2385678)

MS10-096 Vulnerability in Windows Address Book Could Allow Remote Code Execution (2423089)

MS10-097 Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remote Code Execution (2443105)

MS10-098 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2436673)

MS10-099 Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

MS10-100 Vulnerability in Consent User Interface Could Allow Elevation of Privilege (2442962)

MS10-101 Vulnerability in Windows Netlogon Service Could Allow Denial of Service (2207559)

MS10-102 Vulnerability in Hyper-V Could Allow Denial of Service (2345316)

MS10-103 Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2292970)

MS10-104 Vulnerability in Microsoft SharePoint Could Allow Remote Code Execution (2455005)

MS10-105 Vulnerabilities in Microsoft Office Graphics Filters Could Allow for Remote Code Execution (968095)

MODERADO:

MS10-106 Vulnerability in Microsoft Exchange Server Could Allow Denial of Service (2407132)

BOLETIN DE SEGURIDAD DE MICROSOFT DICIEMBRE 2010

Desde Vulnerability Team exortamos a los usuarios y administradores revisar las notificaciones y aplicar las actualizaciones necesarias, para ayudar a mitigar los riesgos.

fuente: microsoft.com