Risk: High
Five critical issues and one important issue were addressed in Microsoft's November security bulletin, which affected a variety of products including Internet Explorer and Macromedia Flash Player. Successful exploitation of all critical issues could result in remote code execution, and two of the critical issues (found in XML Core Services and Internet Explorer) were exploited by hackers in November.
The other critical flaws were found in Microsoft Agent, Macromedia Flash Player and Workstation Service. The important flaw was discovered in Client Service for NetWare, which could also result in remote code execution in the event of successful exploitation.
Full details of all vulnerabilities addressed, including their fixes, are available from Microsoft's website:
http://www.microsoft.com/technet/security/bulletin/ms06-nov.mspx