Yet Another Big Patch Tuesday

MS10-061 fixes a vulnerability in the Print Spooler service in Windows XP. If you are running Windows XP and sharing a printer, attackers can compromise the machine with an over-the-network print request. This vulnerability was found in the Stuxnet malware family and it is currently being exploited in the wild. The Stuxnet malware family has lead to a couple of patches for zero-day exploits, such as MS10-046. MS10-046 was released out-of-band to fix the Windows LNK vulnerability. The Stuxnet malware family prompted this release as it was exploiting the vulnerability as a zero-day.

MS10-062 fixes a vulnerability in the MPEG-4 codec on Windows operating systems. If a user opens a specially crafted malicious media file (AVI) with a media player, an attacker can take control of the machine via remote code execution. Viewing media formats is becoming more and more common for both work and home users. It is not safe to assume that media viewing only occurs at home and not on your network. Media file distribution can happen in many ways, such as visiting a website that hosts malicious media files, viewing media files from a streaming server, or opening the slapstick funny email attachment from your friends.