* Microsoft Out Of Band Patch Release - SANS Internet Storm Center

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Johannes Ullrich

Threat Level: green

* Microsoft Out Of Band Patch Release
Microsoft released the out of band security bulletin and patch it announced yesterday. MS10-002 is a cumulative patch for Internet Explorer. It fixes a total of 8 vulnerabilities. The "famous" vulnerability that triggered the release, CVE-2010-0249, is currently being exploited. According to the bulletin, none of the other vulnerabilities are currently being exploited and all had been disclosed to Microsoft directly without any prior public disclosure. Given the number of ever improving exploits against CVE-2010-0249, and the publicly known use of these exploits, we recommend that you patch as soon as possible.	Chris 140 Posts Jan 21st 2010
Thread locked Subscribe	Jan 21st 2010 1 decade ago
Note that a security update for Silverlight was released on Tuesday, January 19th. No bulletin, but http://support.microsoft.com/kb/979202 claims "This update includes functional, performance, reliability, and security improvements."	Anonymous
Quote	Jan 21st 2010 1 decade ago
We rolled this out to our Citrix environment last night and our sys admins are saying it is causing major issues with XenApp. No solid confirmation, but I would advise anyone relying on Citrix XenApp to test carefully!	jtwaldo 17 Posts
Quote	Jan 22nd 2010 1 decade ago