WebProNews

The now-familiar second Tuesday of the month arrival of Microsoft security bulletins brought ten new arrivals to enterprises and individuals.

Today's spate of updates brought three Critical-rated bulletins to Windows systems. The first of these was a cumulative security update for Internet Explorer. The update resolves two vulnerabilities. One of the two, PNG Image Rendering Memory Corruption, could allow remote code execution should it be exploited while a user with administrative rights was logged in to a machine.

The second dealt with how XML is handled by Internet Explorer. A maliciously crafted web page could disclose the XML data about another site that had been visited. As user interaction is required, this threat is rated Moderate.

Another Critical update addresses a HTML Help vulnerability. It is another remote code execution exploit that was privately disclosed to Microsoft. As with the previous and the next Critical issue, Microsoft recommends patching this immediately.

And, the third Critical vulnerability is in the Server Message Block. This one also poses a potential remote code execution threat.

A total of seven operating system patches and three additional ones for Exchange, Services for UNIX, and Internet Security Accelerator and Small Business server comprised today's bulletins.

David Utter is a staff writer for WebProNews covering technology and business. Email him here.