Microsoft Fixes Record 26 Security Holes

FYI…

- http://blog.washingtonpost.com/securityfix…x_26_secur.html
October 10, 2006
"Microsoft today issued a record-breaking number of security updates, fixing at least 26 separate security holes in its Windows operating system and other products, including 16 vulnerabilities in Microsoft Office and Office components. By my count, this is the largest number of flaws Microsoft has fixed in one go outside of a Service Pack. Among the problems addressed in the ten patch bundles released as part of its monthly patch cycle are four flaws in Office, as well as four security holes each in different versions of Microsoft Word, Excel and PowerPoint (one of the Word flaws is only present in the version made for Apple Macintosh systems)…"

(Also see: http://forums.tomcoyote.org/index.php?showtopic=70838 )

FYI…

- http://www.darkreading.com/document.asp?do…&print=true
OCTOBER 10, 2006
"…Over half of the patches were for "live" vulnerabilities. "Almost all of these include fixes for bugs that were discovered in the wild either being exploited or could be because there's proof-of-concept code published," says Tom Cross, research engineer for Internet Security Systems' X-Force team. The Windows Shell (MS06-57), PowerPoint (MS06-58 ), and Word (MS06-60) bulletins all patch existing zero-day attacks already in the wild, Cross says, and proof-of-concept code was already out for several other patches. Symantec echoed that by pointing out the Excel zero-day exploit using Trojan.Hongmosa and the Word zero-day exploit using Trojan.MDropper.Q, both of which Symantec says it spotted previously. Microsoft rated 15 of the 26 as critical bugs…"