Patch Ms12-027 Now--Zero Day Flaw Being Actively Exploited

snoopy · Apr 10, 2012

Security Alert

Patch MS12-027 Now--Zero Day Flaw Being Actively Exploited
By Tony Bradley, PCWorld

Today is the second Tuesday of April, and that means it’s Microsoft Patch Tuesday time. This month Microsoft released a total of six new security bulletins, but one in particular deals with a zero-day vulnerability impacting virtually every Microsoft user, which is already being exploited in the wild.

Four of the six security bulletins are rated as Critical by Microsoft, with the remaining two ranked as Important. The Critical security bulletins include a fix for Windows and the .NET framework, as well as the perennial favorite—the cumulative update for Internet Explorer. The biggest deal, though, is MS12-027, which addresses a critical flaw in Windows Common Controls.

Attackers are actively exploiting the flaw addressed in MS12-027. Patch now!Andrew Storms, director of security operations for nCircle, declares MS12-027 is the “deploy now” patch of the month. The Windows Common Controls are widely used throughout the Microsoft ecosystem, so there isn’t much that isn’t potentially impacted by this one. Storms adds, “It gets worse: Microsoft has already seen exploits for this vulnerability in the wild in limited attacks.”

In a blog post, VMware’s Jason Miller explains that the MS12-027 flaw can be exploited by simply visiting a malicious website using Internet Explorer, or by opening a file attachment with an embedded malicious ActiveX control.
Click to expand...

Story - http://www.pcworld.com/businesscenter/article/253553/patch_ms12027_nowzero_day_flaw_being_actively_exploited.html

Log in or Sign up

Patch Ms12-027 Now--Zero Day Flaw Being Actively Exploited

snoopy Registered Members

Share This Page

Log in or Sign up

Patch Ms12-027 Now--Zero Day Flaw Being Actively Exploited

snoopy Registered Members

Share This Page

Useful Searches