1. Patch Overview January/February
Wolfgang Kandek, Qualys, Inc
February 14, 2012

2. January Patches
• Microsoft January 8: 7 bulletins – MS13-001-MS13-007
• 2 critical, 5 important
• XML MS13-002

3. January Patches
• Microsoft January 8: 7 bulletins – MS13-001-MS13-007
• 2 critical, 5 important
• XML MS13-002
• Adobe Reader - January 8

4. January Patches
• Microsoft January 8: 7 bulletins – MS13-001-MS13-007
• 2 critical, 5 important
• XML MS13-002
• Adobe Reader - January 8
• Oracle Java 0-day - January 13
• First announced on January 10 – Java 7 update 11

5. January Patches
• Microsoft January 8: 7 bulletins – MS13-001-MS13-007
• 2 critical, 5 important
• XML MS13-002
• Adobe Reader - January 8
• Oracle Java 0-day - January 13
• First announced on January 10 – Java 7 update 11
• Microsoft 0-day Internet Explorer – January 14
• In the wild as of Dec 22
• MS13-008

6. January Patches
• Microsoft January 8: 7 bulletins – MS13-001-MS13-007
• 2 critical, 5 important
• XML MS13-002
• Adobe Reader - January 8
• Oracle Java 0-day - January 13
• First announced on January 10 – Java 7 update 11
• Microsoft 0-day Internet Explorer – January 14
• In the wild as of Dec 22
• MS13-008
• Oracle Critical Patch Update – January 15
• MySQL, RDBMS, Fusion, ERP, CRM, VirtualBox, …
• 80 vulnerabilities

7. February Patches
• Oracle Java 0-day – February 1
• Exploit code in the wild – Java 7 update 13
• Java 6 now end of life

8. February Patches
• Oracle Java 0-day – February 1
• Exploit code in the wild – Java 7 update 13
• Java 6 now end of life
• Adobe Flash 0-day - Febuary 7
• Windows and Macintosh

9. February Patches
• Oracle Java 0-day – February 1
• Exploit code in the wild – Java 7 update 13
• Java 6 now end of life
• Adobe Flash 0-day - Febuary 7
• Windows and Macintosh
• Microsoft February 12: 12 bulletins MS13-009 - MS13-020
• 5 critical, 7 important
• Internet Explorer MS13-009 and MS13-010
• Exchange MS13-020

10. February Patches
• Oracle Java 0-day – February 1
• Exploit code in the wild – Java 7 update 13
• Java 6 now end of life
• Adobe Flash 0-day - Febuary 7
• Windows and Macintosh
• Microsoft February 12: 12 bulletins MS13-009 - MS13-020
• 5 critical, 7 important
• Internet Explorer MS13-009 and MS13-010
• Exchange MS13-020
• Adobe Flash – Febuary 12

11. February Patches
• Oracle Java 0-day – February 1
• Exploit code in the wild – Java 7 update 13
• Java 6 now end of life
• Adobe Flash 0-day - February 7
• Windows and Macintosh
• Microsoft February 12: 12 bulletins MS13-009 - MS13-020
• 5 critical, 7 important
• Internet Explorer MS13-009 and MS13-010
• Exchange MS13-020
• Adobe Flash – February 12
• Adobe Reader 0-day – February12
• In the wild – no patch yet

12. Patch Monitoring
• Microsoft
• Apple
• Adobe
• Flash
• Reader
• Oracle Java

13. Patch Monitoring
• Microsoft
• Apple
• Adobe
• Flash
• Reader
• Oracle Java