Microsoft delivers monster security update for Windows, IE
Even though Microsoft had rushed out an emergency patch before Conficker appeared, the worm still spread widely and wildly.
"I don't know which is worse, MS11-018 or MS11-020," said Storms. "But the SMB bug is a worm kind of vulnerability. It has the makings of another Conficker."
Assuming an attacker can plant malware on a single PC -- not difficult when people carelessly click on links -- he could use the SMB bug patched in MS11-020 to spread a worm to other machines on the same network.
"We learned a lot from Conficker," said Storms. "It led us to not believe that the sky is falling when people said so, but it also tells us that you need to install this patch right away."
MS11-019, another update that focused on the SMB protocol, was Bryant's third priority pick.
The company also issued patches for Excel, PowerPoint, .Net and multiple bits and pieces of Windows.
In the last category, MS11-034 patched 30 vulnerabilities -- nearly half the total and a record for a single update -- in the Windows kernel device driver. All 30 were reported to Microsoft by Tarjei Mandt, a researcher who works for Norman ASA, a Norwegian antivirus firm, who has numerous other kernel bugs on his resume.
"In the end, though, these are just elevation of privilege vulnerabilities," said Josh Abraham, security researcher at Rapid7. "From a penetration tester's perspective, which is what I do, let's just say they wouldn't be my main focus."
Microsoft issued a pair of security advisories today as well, each backed by a download users can retrieve and install.
The most notable of the two, said researchers, delivered a file validation security feature that debuted in Office 2010 to users running the older Office 2003 and Office 2007 application suites.
In December 2010, Microsoft announced it would backport file validation to Office 2003 and Office 2007, saying then that it would do so early this year.
Today's security patches can be downloaded and installed via the Microsoft Update and Windows Update services, as well as through Windows Server Update Services.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer or subscribe to Gregg's RSS feed . His e-mail address is firstname.lastname@example.org.
Read more about Security in Computerworld's Security Topic Center.
- Enable secure remote access to 3D data without sacrificing visual perfomance Design and manufacturing companies must adapt quickly to the demands of an increasingly global and competitive economy. To speed time to market for...
- Virtually Delivered High Performance 3D Graphics "A picture is worth a thousand words." That old phrase is as true today as it ever was. Pictures (i.e., those with heavy...
- Best Practices for Securing Hadoop Historically, Apache Hadoop has provided limited security capabilities. To protect sensitive data being stored and analyzed in Hadoop, security architects should use a...
- Top Tips for Securing Big Data Environments: Why Big Data Doesn't Have to Mean Big Security Challenges Organizations must come to terms with the security challenges they introduce. As big data environments ingest more data, organizations will face significant risks...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities. All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!