The Register® — Biting the hand that feeds IT

Five critical vulns mark November Patch Tuesday

0day + one

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

Microsoft delivered six patches on Tuesday, five of which address critical vulnerabilities, as part of its regular patch Tuesday update cycle.

Two of the five critical patches address flaws that have been actively exploited by hackers this month - a flaw in XML Core Services (MS06-071) and an Internet Explorer remote code execution flaw (MS06-067).

The other three critical updates resolve flaws in Macromedia Flash Player version 6 from Adobe (which ships with XP Service Pack 2 and XP Professional x64 Edition), flaws in Workstation Service, and bugs in the Remote Agent component of Windows.

Redmond also issued an "important" update designed to address a security bug in client service for NetWare.

Microsoft's bulletin summary can be found here. ®

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

Don’t Miss

HandcuffsFeds: Hospital hacker's 'massive' DDoS averted

Arrest foils 'Devil's Day' scheme

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

MicrosoftMicrosoft knew of nasty IE bug a year before attacks

Security delayed or security denied?

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?