Qualys Blog

www.qualys.com
wkandek

Patch Tuesday – Preview for November 2010

Microsoft Advance Notification for November’s Patch Tuesday lists only 3 updates addressing a total of 11 vulnerabilities. The products affected are Microsoft Office and Microsoft’s Forefront Unified Access Gateway. One of the Microsoft Office vulnerabilities is rated "Critical" and affects all version of Office including Office 2010.

A "Critical" rating on an Office program is fairly rare, most vulnerabilities on the Office suite are categorized as "Important" because they typically require user interaction to get a successful exploitation. "Critical" here indicates a vulnerability that can be used to take control of the target machine without user interaction, such as MS10-056, where visualizing an e-mail in Outlook’s preview pane was sufficient to trigger the flaw.

Leave a Reply