Microsoft has released 7 bulletins outlining the security patches needed to address 23 vulnerabilities. What needs to be given attention first depends on the enterprise environment and the software that is installed.  If you have Office 2007 Word installed on a workstation or Terminal Server, then MS12-029 should get immediate attention. This was at the top of Microsoft’s list in the order of severity. Microsoft Outlook can also use Word as it’s email reader. See the chart for other version affected.

Next is the combined security update for Microsoft Office, Windows, .NET Framework, and Silverlight, MS12-034. This bulletin addresses 10 vulnerabilities, all of which Microsoft indicates successful exploit code is likely to be seen. In fact 3 of the vulnerabilities were publicly disclosed previously. It’s clear that Microsoft has put a lot into this update. We recommend an early deployment and at this point there are no known issues. Some of the vulnerabilities affect servers as well as workstations.

MS12-035 is next on the list. It addresses two more .NET Framework vulnerabilities that are rated critical. The four other bulletins are rated important and should be given attention also.

Patch Tuesday Coverage Made Possible By: Lumension:  IT Secured.  Success Optimized.™

Visit the Lumension Patch Tuesday Center