According to Microsoft patch tuesday preview, there will only be one bulletin released tomorrow [1].

The bulletin is only critical for Windows 2000 and considered "low" for other versions of Windows.

It does not appear that there will be a patch for the IIS file extension issue. We will have more details once the bulletin is released. Don't forget our reboot Wednesday webcast [2]!

[1] http://www.microsoft.com/technet/security/bulletin/ms10-jan.mspx
[2] http://isc.sans.org/j/webcast

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter