- Jan 24, 2011
- 9,378
Microsoft released 8 different security updates this Patch Tuesday to fix flaws in Windows and Internet Explorer, pushing the overall count of security bulletins for 2015 to 63.
Out of the eight security fixes, 2 are rated as critical and target flaws in Windows and Internet Explorer, which according to the company can allow remote code execution in the case of successful exploitation and thus provide the attacker with full control over an unpatched system.
MS15-056 is a cumulative security update for Internet Explorer which will require a system reboot, so system administrators should have this in mind when installing this month’s Patch Tuesday fixes.
Microsoft says that in order to exploit the vulnerabilities in Internet Explorer that this patch is trying to fix, the attacker needs to trick the user into visiting a specially crafted webpage which contains elements that would help exploit an unpatched system. If the exploit is successful, the attacker can obtain the same privileges as the logged in user.
The patch is being delivered to all Windows versions currently supported by Microsoft (Windows XP users are left unprotected because of EOS).
MS15-057, on the other hand, is the second critical security update and is trying to fix flaws in Windows Media Player, which could once again lead to remote code execution.
“The vulnerability could allow remote code execution if Windows Media Player opens specially crafted media content that is hosted on a malicious website,” Microsoft explains, adding that the attacker could obtain the same rights as the logged in user.
Again, all Windows versions that are still receiving support should get this patch.
Read more: http://news.softpedia.com/news/Micr...or-Windows-and-Internet-Explorer-483833.shtml
