This upcoming Tuesday Microsoft is releasing two bulletins addressing three vulnerabilities in Windows. Detailed information can be found in the advance notification bulletin.

• The first bulletin affects Windows Vista and has been classified as Important
• The second bulletin affects all supported versions of Windows and has an aggregate of Critical

Microsoft indicated it will not be releasing a fix for the vulnerability affecting Windows Graphics Rendering Engine (Security Advisory 2490606) or the vulnerability affecting Internet Explorer (Security Advisory 2488013).

[1] http://blogs.technet.com/b/msrc/archive/2011/01/06/advance-notification-service-for-the-january-2011-security-bulletin-release.aspx

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot org