Microsoft patches about 30 bugs in its products

23rd December 2008

The other day Microsoft released another set of patches for their products.
December update eliminates 28 vulnerabilities described in the eight security bulletins. Twenty-three of them are ranked critically dangerous. This means that theoretically the bugs could be used by hackers to gain unauthorized access to remote computer to further perform arbitrary actions.
Specialists point out that one of the most dangerous vulnerabilities touched the module of GDI (Graphics Device Interface): with the help of a specially formed image file in WMF, an attacker could gain full control of the remote PC. Two other major bugs were found in Windows Search.
Several vulnerabilities were found in Word and Excel: to organize an attack, a hacker should force a user to open a document created in a special way. In addition, Microsoft has released patches for critical bugs in Internet Explorer and Visual Basic 6.0.
A few other bugs were ranked critical. Such bugs were found in Microsoft Office SharePoint Server and some components of Windows Media.
The next set of patches will be released on January, 13, 2009.