Both fixes in this thin November slate are related to remote code execution (RCE) vulnerabilities and are fixes for Windows programs.
The critical item affects Windows and Microsoft Office. Per Redmond's advance notice, it deals specifically with Windows Extensible Markup Language (XML) Core Services, versions 3.0, 4.0 and 6.0. XML programs are used for creating Web languages and help systems share structured data and encode documents over the Internet. This is particularly important for users of SharePoint Server. The applicable operating systems for this patch are Windows 2000 Service Pack 4, Windows XP, Vista and Windows Server 2003 and 2008.
The important item in this release is a general Windows patch that also affects Windows 2000 SP4, XP, Vista and Windows Server 2003 and 2008.
Both updates will require restarts.
Those interested in scanning items pertaining to general updates and other non-security content can look at this Knowledge Base article for a description of such updates on Microsoft Update, Windows Update and Windows Server Update Services.
‘Twilight’ Tuesday: Anna Kendrick Says It Was ‘Easy To Get Googly Eyed’ At Robert Pattinson
Fake Microsoft Security Update Makes Rounds
11 Fixes Expected for Patch Tuesday
‘Twilight’ Tuesday: Cam Gigandet Talks Bad Guys, Fight Scenes And Sneaking Up On You Opening Night
