Security Alert January 2011

Microsoft Security Bulletins for January 2011

Below is the official breakdown of the January 2011 Patch Tuesday Release:

MS11-002/KB294871 – Critical (Windows XP,Vista,Win7,2003,2008 *Server Core): This security update resolves two privately reported vulnerabilities in Microsoft Data Access Components. The vulnerabilities could allow remote code execution if a user views a specially crafted Web page. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be affected less than users who operate with administrative user rights. **Patch ASAP**

MS11-001/KB294871 – Important (Windows Vista): This security update resolves a publicly disclosed vulnerability in Windows Backup Manager. The vulnerability could allow remote code execution if a user opens a legitimate Windows Backup Manager file that is located in the same network directory as a specially crafted library file. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open the legitimate file from that location, which in turn could cause Windows Backup Manager to load the specially crafted library file.