Join Trustwave at the 2023 Gartner Security & Risk Management Summit in London, September 26-28. Learn More

Request a Demo

Join Trustwave at the 2023 Gartner Security & Risk Management Summit in London, September 26-28. Learn More

Request a Demo
Services
Capture
Managed Detection & Response

Eradicate cyberthreats with world-class intel and expertise

twi-cloud-lock-color-svg
Managed Security Services

Expand your team’s capabilities and strengthen your security posture

twi-briefcase-color-svg
Consulting & Professional Services

Tap into our global team of tenured cybersecurity specialists

twi-dashboard-color-svg
Penetration Testing

Subscription- or project-based testing, delivered by global experts

twi-database-color-svg
Database Security

Get ahead of database risk, protect data and exceed compliance requirements

twi-email-color-svg
Email Security & Management

Catch email threats others miss with layered security & maximum control

twi-managed-portal-color
Co-Managed SOC (SIEM)

Eliminate alert fatigue, focus your SecOps team, stop threats fast, and reduce cyber risk

View All Trustwave Services
Solutions
BY INDUSTRY
BY REGULATION
BY TOPIC
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
The Trustwave Approach
A focus on threat detection and response
Awards and Accolades
Recognition by analysts and media outlets
Trustwave SpiderLabs Team
Researchers, ethical hackers and responders
Trustwave Fusion Platform
Unprecedented security visibility and control
SpiderLabs Fusion Center
Our cybersecurity command center
Security Operations Centers
Distributed worldwide defense nodes
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Register
Login
Resources
BLOGS
UPCOMING
MEDIA & ASSETS
NOTICES
HELP

Microsoft Advanced Notification for November 2012 - RCE, Yikes!

Space Rogue Nov 8, 2012

Contents

SpiderLabs Radio January 11, 2013 w/ Space Rogue

2014 Trustwave Global Security Report Available Now

SpiderLabs Radio: March 7, 2014

Microsoft has released its advance notification for next weeks Patch Tuesday updates.

The good news is that there are only six bulletins this month; the bad news is that four of those are rated as critical and five of them result in Remote Code Execution! Yikes! The RCEs all seem to be at the operating system level affecting everything from XP SP3 up to and including Server 2008 R2. The one bulletin with RCE that is only labeled important and not critical is part of MS Office 2003, 2007 and 2010, including 2008 and 2011 for Mac. The sixth bulletin, rated as Moderate, results in Information Disclosure and impacts Vista SP2, Windows 7 32 and 64 bit as well as multiple flavors of Server 2008.

Stay tuned for a more detailed post once the patches have been released.

SpiderLabs Radio January 11, 2013 w/ Space Rogue

2014 Trustwave Global Security Report Available Now

SpiderLabs Radio: March 7, 2014
Previous

Microsoft Patch Tuesday September 2012 – Update those Certs!
Next

Detecting Successful XSS Testing with JS Overrides