Risk: High
Microsoft has identified four critical and two important issues in October's Patch Tuesday.
Critial vulnerabilities have been identified in Internet Explorer 5.01, 6.x and 7.x, which if exploited, can compromise a user's system. A flaw has been identified in the way Kodak Image Viewer handles specifically crafted images files, this flaw could allow an attacker to remotely execute code. An NNTP flaw found in Outlook Express and Windows Mail could allow an attacker to remotely execute code by constructing a special web page that exploits the vulnerability and Microsoft Word has a flaw that could allow remote code execution if a user opens a specially crafted Word file.
Two important vulnerabilities addressed are in Microsoft Windows SharePoint Services 3.0 and Microsoft Office SharePoint Server 2007 that could allow an attacker to run arbitrary script. The second important flaw resides in the remote procedure call (RPC) that, if successfully exploited, could result in Denial of Service.