Microsoft patches 1990s-era Ping of Death

From InfoWorld: Microsoft today issued 13 security updates that patched 22 vulnerabilities in Internet Explorer, Windows, Office, and other software, including one that harked back two decades to something dubbed "Ping of Death."

Of Tuesday's 13 updates, called "bulletins" by Microsoft, two were labeled "critical" -- the most-serious rating in the company's four-step score -- nine were marked "important," the next-most-dangerous category, and two were pegged as "moderate."

Three of the 22 individual vulnerabilities patched today in the baker's dozen of bulletins were rated critical. The remainder were split -- 15 and four, respectively -- between important and moderate.

Researchers today called out MS11-057, which patches seven flaws in Internet Explorer (IE), as the most important to patch pronto.

"This is the anticipated IE update, about what we expected," said Andrew Storms, director of security operations at nCircle Security, referring to Microsoft's habit of updating its browser every two months. "The most important thing here is that it affects IE9."

View: Article @ Source Site