2011 年 7 月：マイクロソフト　定例セキュリティ更新プログラム情報

Microsoft addresses the following vulnerabilities in its July batch of patches:

• (MS11-053) Vulnerability in Bluetooth Stack Could Allow Remote Code Execution (2566220)
  Risk Rating: Critical
  
  This security update fixes a reported vulnerability in Windows Bluetooth Stack, which may lead to arbitrary code execution. To exploit this bug, a remote user may send specifically crafted Bluetooth packets to a system. Read more here.


• (MS11-054) Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917)
  Risk Rating: Important
  
  This security update fixes 15 privately reported vulnerabilities in Microsoft Window, the most severe of which may lead to elevation of of privilege if an attacker logged on locally and executes a malicious application. However, remote user must be logged-on locally to do a successful exploit. Read more here.


• (MS11-055) Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2560847)
  Risk Rating: Important
  
  This security update resolves a publicly disclosed vulnerability in Microsoft Visio, which may lead to remote arbitrary code execution if a user opens a legitimate Visio file located in the same network directory as a malicious library file. As a result, attacker may gain same user rights as the logged-on user. Read more here.


• (MS11-056) Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)
  Risk Rating: Important
  
  This bulletin resolves five privately reported vulnerabilities in the Microsoft Windows Client/Server Run-time Subsystem (CSRSS), which may result to elevation of privilege if remote user logs on to a system and runs a malicious application. Read more here.