Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: InfoSec Handlers Diary Blog - Microsoft March Patch Pre-Announcement InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Microsoft March Patch Pre-Announcement

Published: 2014-03-08
Last Updated: 2014-03-08 13:23:37 UTC
by Guy Bruneau (Version: 2)
5 comment(s)

Microsoft released its pre-announcement for the upcoming patch Tuesday. The summary indicates a total of 5 bulletins, 2 are critical with remote code execution and 3 Important with a mix of security feature bypass and elevation of privileges. The announcement is available here.

Reminder

Last patch Tuesday for both Windows XP(SP3) and Office 2003 is next month April 8, 2014. This means that any new vulnerabilities discovered in Windows XP or Office 2003 after its “end of life” will no longer be addressed by new security updates from Microsoft. It is now time to upgrade on the Windows 7 or 8. ISC has pool going title "The end of XP is looming where are you at?"

[1] http://technet.microsoft.com/en-us/security/bulletin/ms14-mar
[2] http://blogs.technet.com/b/kdean/archive/2014/01/12/windows-xp-end-of-life-amp-support-options.aspx
[3] http://blogs.technet.com/b/security/archive/2013/04/09/the-countdown-begins-support-for-windows-xp-ends-on-april-8-2014.aspx
[4] http://blogs.technet.com/b/security/archive/2013/08/15/the-risk-of-running-windows-xp-after-support-ends.aspx
[5] https://isc.sans.edu/poll.html

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

5 comment(s)
Diary Archives