Four Critical Fixes Coming for Windows, IE, Mail
The four worst vulnerabilities out of the pack of six security updates can lead to system takeover.Microsoft will send out six security bulletins, four of them for problems rated "critical," the companys highest severity rating, on Patch Tuesday, June 12. All four of the most serious vulnerabilities, in Windows and in IE, can lead to systems getting hijacked. Three of the critical problems are in Windows; one is in Internet Explorer, one is in Outlook Express and Windows Mail, and there is one "important" fix for Visio. Also, a moderate bug has been found in Windows. Microsofts advance notification, sent on June 7, was devoid of technical detail on the security fixes. The company also shrugged its shoulders about describing attack scenarios, saying that it couldnt depict proper scenarios at this point "due to a lack of details."
This particular advance notification is the first of Microsofts revamped ANS (advanced notification service) format, in which the company said it would be providing more detail than in previous advance notifications.
- Provide local interactive access for trusted individuals only.
- Block external access at the network boundary, unless external parties require service.
- If global access isnt needed, filter access to the affected computer at the network boundary. Restricting access to only trusted computers and networks might greatly reduce the likelihood of a successful exploit.
- Deploy NIDS (network intrusion detection systems) to monitor network traffic for malicious activity.
- Deploy NIDS to monitor network traffic for signs of anomalous or suspicious activity. This includes but is not limited to requests that include NOP sleds and unexplained incoming and outgoing traffic. This may indicate exploit attempts or activity that results from a successful exploit.
- Implement multiple redundant layers of security.
- As an added precaution, deploy memory-protection schemes (such as non-executable stack/heap configuration and randomly mapped memory segments). This may complicate exploitation of memory-corruption vulnerabilities.
- Run all software as a nonprivileged user with minimal access rights. To reduce the impact of latent vulnerabilities, run applications with the minimal amount of privileges required for functionality.
Check out eWEEK.coms Security Centerfor the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEKs Security Watch blog.