Microsoft Security Patches XML Flaw that is currently under attack.
Today, July, 10Th, 2012, Microsoft released nine new security bulletins. Three of these were rated as critical to patch flaws in the following:
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479)
This security update resolves a publicly disclosed vulnerability in Microsoft XML Core Services. The vulnerability could allow remote code execution if a user views a specially crafted web page using Internet Explorer. An attacker would have no way to force users to visit such a website. Instead, an attacker would need to convince users to visit the website, which would typically be done by getting them to click a link in an email message or Instant Messenger message that takes the user to the attacker’s website. Some of the
most common emails have titles and body content related past due billing notices, compromised Credit Card accounts, and "This is Funny, must watch!" tags.
Flaws in Internet Explorer 9. – Cumulative Security Update for Internet Explorer (2719177)
This security update resolves two privately reported vulnerabilities in Internet Explorer. It could allow remote code execution if a user views a specially crafted web page using Internet Explorer. If an attacker who successfully exploited any of these vulnerabilities they could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Microsoft Data Access Components (MDAC) – Vulnerability in Microsoft Data Access Components
Could Allow Remote Code Execution (2698365)
This security update resolves a privately reported vulnerability in Microsoft Windows. This could allow remote code execution if a user views a specially crafted web page. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.
The XML exploit referenced above has already been detected as being used in a variety of malware and virus tool kits. This means that if users on unprotected systems are browsing the web or checking emails, there is a high degree of chance of a system being compromised.
If you need assistance with checking your systems for these and any other vulnerabilities, please contact the CCS Retail Systems Support Department.