Four Fixes for Eight Vulnerabilities

Microsoft issued four security bulletins for Patch Tuesday, addressed eight vulnerabilities. Three critical patches are for Microsoft Exchange Server and Internet Explorer. Microsoft said an attacker can gain control of the Exchange server. The patches for Microsoft's Internet Explorer browser fix easily exploited vulnerabilities.

February's Patch Tuesday saw Microsoft Relevant Products/Services issue four security Relevant Products/Services bulletins that address a total of eight vulnerabilities, three rated as critical.

The first critical vulnerability relates to Microsoft Exchange Server. An attacker can exploit it remotely by sending a maliciously designed e-mail message to a user on an unpatched Exchange server.

"This attack can result in the installation and execution of attacker-supplied code, giving complete control of the e-mail server to the attacker," said Ben Greenbaum Sr., research manager at Symantec Security Response. ... Go to source