By John Leyden
Spring is a time for growth. And Microsoft has taken this maxim to heart by releasing an unprecedented number of security fixes on the same day. Yesterday it released four security patches to protect Windows users against 20 security vulnerabilities. Eight vulns are critical.
The most serious is a critical vulnerability in the Windows Local Security Authority Subsystem (LSASS), discovered by security tools outfit eEye. Serious vulnerabilities have also been uncovered in the Microsoft Abstract Syntax Notation One (ASN.1) library, the Negotiate Security Software Provider (SSP) interface, Microsoft RPC runtime library and the parsing of MIME encoded content by Outlook Express.
Less serious problems have been found in SSL handshakes, H.323 parsing in Netmeeting, Microsoft LDAP, and the Help and Support Centre protocol.
These flaws are open to a raft of exploit mechanisms which could allow skilled hackers to run amok.
Read the rest of the story here.
Get the security updates from Windows Update or manually at Microsoft’s Security Page
