Earlier this past week, Microsoft released a patch addressing 19 flaws all rated as critical. For more information read Ryan Naraine's blog "Patch Tuesday: 7 bulletins, 19 flaws, all critical".
As Ryan notes, six of the nineteen patches applied to Vista. Another fixed the DNS problem while still others addressed flaws in Word, Excel and Office.
While it is good that Microsoft has released this patch, the reality is that at almost anytime during the last year, there have been critical flaws in Office products. When Microsoft fills these holes, others immediately appear as zero-day attacks.
To get around the use of having products that resemble Swiss Cheese from a security perspective, I strongly recommend the implementation of MOICE. Read my blog here for more details.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us