January 2013 - Microsoft Releases 7 Security Advisories

Microsoft addresses the following vulnerabilities in its January batch of patches:

• (MS13-001) Vulnerability in Windows Print Spooler Components Could Allow Remote Code Execution (2769369)
  Risk Rating: Critical
  
  This patch addresses a vulnerability found in Microsoft Windows, which could allow remote code execution when successfully exploited. Read more here.



• (MS13-002) Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (2756145)
  Risk Rating: Critical
  
  This patch addresses vulnerabilities found in Microsoft XML Core Services, which can result to remote code execution once successfully exploited. Read more here.



• (MS13-003) Vulnerabilities in System Center Operations Manager Could Allow Elevation of Privilege (2748552)
  Risk Rating: Important
  
  This patch addresses vulnerabilities found in Microsoft System Center Operations Manager. Read more here.



• (MS13-004) Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2769324)
  Risk Rating: Important
  
  This patch addresses vulnerabilities in the .NET Framework, which when exploited successfully can gain remote attackers the same user rights as the logged on user. Read more here.



• (MS13-005) Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778930)
  Risk Rating: Important
  
  This patch addresses vulnerability in Microsoft Windows which can allow elevation of privilege once remote attacker executes a specially crafted application. Read more here.



• (MS13-006) Vulnerability in Microsoft Windows Could Allow Security Feature Bypass (2785220)
  Risk Rating: Important
  
  This patch addresses a vulnerability in the implementation of SSL and TLS found in Microsoft Windows. When successfully exploited via a remote attacker intercepting Web traffic handshakes, it can allow security feature bypass. Read more here.



• (MS13-007) Vulnerability in Open Data Protocol Could Allow Denial of Service (2769327)
  Risk Rating: Important
  
  This patch addresses a vulnerability in the Open Data (OData) protocol, which when exploited can allow denial of service (DOS). Read more here.