Sicherheitsupdates im Januar 2011

Im Januar gibt es nicht so arg viele Sicherheitsupdates. Beachten sollte man die trotzdem:

MS11-002

Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910)
This security update resolves two privately reported vulnerabilities in Microsoft Data Access Components. The vulnerabilities could allow remote code execution if a user views a specially crafted Web page. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Critical
Remote Code Execution

May require restart

MS11-001

Vulnerability in Windows Backup Manager Could Allow Remote Code Execution (2478935)
This security update resolves a publicly disclosed vulnerability in Windows Backup Manager. The vulnerability could allow remote code execution if a user opens a legitimate Windows Backup Manager file that is located in the same network directory as a specially crafted library file. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open the legitimate file from that location, which in turn could cause Windows Backup Manager to load the specially crafted library file.

Important
Remote Code Execution

Die Hinweise sind aus dem Sicherheitsbulletin vom Januar, das Orginal findet ihr hier:

http://www.microsoft.com/technet/security/bulletin/ms11-jan.mspx

Interessant ist evtl. auch dieser hier von kurz vor Weihnachten:

http://www.microsoft.com/technet/security/advisory/2488013.mspx

Happy Patching

Viele Grüße

Walter Steinsdorfer