Patch Tuesday: XP SP2 support ends, Help and Support Center bug fixed

Microsoft issued four security bulletins yesterday fixing vulnerabilities in:

-- Microsoft Windows Help and SupportCenter (MS10-042)
-- Microsoft Windows Canonical Display Driver (cdd.dll) (MS10-043)
-- Microsoft Office Access ActiveX Controls (MS10-044)
-- Microsoft Office Outlook (MS10-045)

The vulnerability in Help and SupportCenter, (MS10-042), was in the news last month when a researcher released proof of concept code which malicious operators then exploited. The vulnerability allowed execution of code from a malicious Web page or malicious link in an e-mail

Microsoft summary here.

The monthly updates also mark the end of Microsoft’s support for Windows XP Service Pack 2. Users should upgrade to XP SP3 or Win 7.

Tom Kelchner