Microsoft kicks off 2013 with 7 Patch Tuesday security bulletins


Microsoft will be rolling out two critical and five important security updates (MS13-001--MS13-007), in the first Patch Tuesday of 2013 next week.

This one is similar to that of January 2012, which also saw seven bulletins--though only one was flagged as critical. Despite the relatively low number though, system administrators can expect a fair number of system restarts given how the security vulnerabilities span nearly all versions of the Windows operating systems.

The two critical bugs are Bulletin 1 and Bulletin 2, for which exploits can be executed remotely. The former affects Microsoft (NASDAQ: MSFT) Server 2008 Release and Server 2008 SP1, and is a bug that could be exploited by a worm.

On its part, Bulletin 2 is concerning, as it affects a wide range of Microsoft operating systems, including Windows 8, Windows RT and Server 2012. As such, organizations will want to get the pertinent patches installed as soon as possible.

Alex Horan, senior product manager at CORE Security, noted that while the two critical bulletins will get the lions' share of attention, bulletin 5 may end up being the most significant given that it targets Vista SP2, Windows Server 2008 and Windows 7.

The broad number of affected operating systems means that the bulletin "has the potential for the most long-term issues, as it represents an extremely large base of potential targets if it is not rectified properly," wrote Horan in an email to FierceCIO:TechWatch.

For more:
- check out this article at ZDNet

Related Articles:
7 bulletins for final Patch Tuesday of 2012
3 critical updates for Windows 8 on Patch Tuesday